diff --git a/CHANGELOG.md b/CHANGELOG.md
index e9f4042..7624c9e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,17 @@ Cambios notables de la librería TypeScript y de la página. El proyecto usa ver
 
 ## 0.5.0 — sin publicar
 
+### El borrador de la especificación 0.16 (07-10-2026)
+
+El borrador v0.16 de la rama `v0.16` de `datekeys-go`, en `4f78854`, aún sin aprobar: lo que encontró la revisión de Astra de la v0.15. No cambia ningún formato; cambian el veredicto de un sello sin `accuracy` y la lectura del JSON de drand (§76, «Cambios normativos de la v0.16»).
+
+- `SPEC_VERSION` pasa a `0.16`. `testdata`, `wordlists` y `annex` se sincronizan con `4f78854` (`node scripts/sync-testdata.mjs sync --commit 4f78854`): el campo `spec` de cada fichero dice `0.16`; `vectors/security_cms.json` se hizo de nuevo, con 143 casos y `seal_reason`; `vectors/release.json` gana 26 casos del JSON de drand; `vectors/wordkey.json`, el texto del vector del anexo, también con sus marcas sueltas, y su llave; y llegan dos fixtures, `format3_time_and_key_words` y `format3_full_chunk`. El anexo de recuperación es el §79 del borrador v0.16, con la licencia de la especificación, CC BY-ND 4.0, en su título (`70d907b`) y la llave de palabras en 79.7.
+- **El sello sin `accuracy`** (§29.7, §29.11, como `7e3b810` de Go). Un sello válido es S4 solo si el token lleva `accuracy` y t más la precisión es anterior a `round_time`; si no, S5, con el primer motivo que se cumple: `late`, sellado después o demasiado cerca; `no accuracy, BTSP`, sin `accuracy` en un token de la política BTSP de ETSI EN 319 421 (0.4.0.2023.1.1), que la exige; o `no accuracy`. Una `accuracy` de 0 segundos, o vacía, es una precisión de 0 y vale. `cms.ts`: el token gana `hasAccuracy` y `policy`, y `tokenIsBTSP`. `securitycms.ts`: `SealReason`, `Detail.sealReason` y `SignerLine.reason`. `security.ts`: S5 ya no tiene texto fijo; `verdictLines` escribe «No acredita que se sellara antes de la fecha de apertura: ‹motivo›.», y la línea de un firmante de F6 cuyo sello no lo acredita, «sin acreditar que fuera antes de la fecha de apertura: ‹motivo›», con los textos de `sealReasonText`, los de Go byte a byte.
+- **El escritor avisa** (§62.1, regla 19). `encryptFiles` devuelve en `Encrypted.security` los veredictos del área que escribió, como `Result.Security` de Go: un sello sin `accuracy` se escribe, y quien escribe ve su S5, o la línea de su firmante, con el motivo. `/create` no sella, así que no cambia.
+- **El JSON de drand, estricto** (§47.1, como `b570338` de Go). `releaseobject.ts` cambia el lector que imitaba `encoding/json` por `parseDrandJSON`, como `ParseDrandJSON` de Go: JSON de RFC 8259 en UTF-8 válido cuyo valor es un objeto, ningún nombre repetido en ningún objeto, nombres comparados exactos tras decodificar sus escapes (`"round"` es `round`, y `ROUND` otro nombre), un sustituto escapado sin su pareja es JSON mal formado, `round` es un número sin signo, fracción ni exponente de 1 a 2⁵³ − 1, `signature` y `randomness` son cadenas, y `randomness`, si viene, aunque sea vacía, es el SHA-256 de la firma. Los textos de error no cambian. Como la ronda ya no pasa de 2⁵³ − 1, `ParsedRelease` es un `Release`, sin `bigint`. `drand.ts` lee las respuestas de los relays con `parseDrandJSON`, como el cliente de Go, y `release-input.ts`, lo pegado, con `strictJSON` y `jsonRound`, para que la página no lea otra ronda que el paso 10.
+- **Las pruebas.** `vectors.test.ts` compara `seal_reason` en cada caso de `security_cms.json` y en cada firmante, y corre los 38 JSON de `release.json`. `securitycms.test.ts` lleva los casos nuevos de `signature2_test.go` (sin `accuracy` años antes y después, BTSP con ella y sin ella, una `accuracy` de 0 segundos y vacía, y un firmante cuyo sello no la lleva), y `releaseobject.test.ts`, los de `drandjson_test.go`, con los escapes escritos como escapes, que el generador de `release.json` escribió sin escapar. `format3_time_and_key_words` abre con la identidad que dan las palabras de su `words_text` con `normalizeWords` y `wordKey`, en la librería y en la página, y `format3_full_chunk`, cuyo `PAYLOAD_AGE` acaba en un trozo completo, abre a su fichero. `check-build.mjs` cuenta `words_text` entre los secretos de los fixtures.
+- **Los ficheros de `testing/` generados con Go**, de nuevo con `4f78854`: `mutation-texts.json` (solo cambia su campo `spec`); `ibe-vectors.json`, con los dos fixtures nuevos y el resto idéntico; y `signing-vectors.json`, en una exportación de `4f78854`, con las mismas cinco muestras, cuyo `ts` se volvió a leer: las cápsulas salen iguales, y como los tokens del sellador no llevan `accuracy`, sus sellos dan ahora S5.
+
 ### Las palabras al azar de la llave de palabras (07-10-2026)
 
 El SHOULD de §38.1, ofrecer palabras al azar de una lista pública, como hace `datekeys encrypt -new-words` desde `c49c67c` de `datekeys-go`. No cambia ningún formato ni la derivación.
diff --git a/README.md b/README.md
index 4e36df7..12495f1 100644
--- a/README.md
+++ b/README.md
@@ -21,12 +21,12 @@ Hay tres números de versión, cada uno con su significado, como en la referenci
 | Versión | Dónde | Cambia cuando |
 |---|---|---|
 | Formato | Dentro de los objetos: el formato de la cápsula, el `VERSION` del prelude de DKC1, 1, 2 o 3 al leer, que fija también la versión de schema de CONTROL_CBOR; y 1 en la trama DKK1 y en el schema de los demás objetos | Cambia el formato. Un lector rechaza una versión que no conoce (§22, §70) |
-| Especificación | `SPEC_VERSION` de `src/lib/dkc/version.ts`, hoy `0.15`: la del tag `spec-v0.15` de `datekeys-go`, que aprobó el autor el 7 de octubre de 2026. `testdata` está en ese tag (`fe50885`), y todos sus ficheros dicen `0.15` | Cambia el texto normativo |
+| Especificación | `SPEC_VERSION` de `src/lib/dkc/version.ts`, hoy `0.16`: el borrador v0.16 de la rama `v0.16` de `datekeys-go`, aún sin aprobar, en `4f78854`. `testdata` está en ese commit, y todos sus ficheros dicen `0.16` | Cambia el texto normativo |
 | Librería | `VERSION` de `src/lib/dkc/version.ts`, igual al campo `version` de `package.json` | Cambia la API o el comportamiento. Versionado semántico, sin promesa de estabilidad antes de 1.0.0 |
 
 `version.test.ts` comprueba que `VERSION` coincide con `package.json` y con su lockfile, y que `SPEC_VERSION` es la versión que nombran los vectores y fixtures compartidos; `vectors.test.ts` exige esa versión a cada fichero. El pie de la página muestra las dos.
 
-La versión en desarrollo es `0.5.0-dev`. La última publicada es la `0.4.0`, del 7 de octubre de 2026, con el tag `v0.4.0`, que cubre:
+La versión en desarrollo es `0.5.0-dev`, que sigue el borrador v0.16: el sello sin `accuracy` no prueba nada antes de la fecha de apertura, y el JSON de drand se lee estricto. La última publicada es la `0.4.0`, del 7 de octubre de 2026, con el tag `v0.4.0`, que cubre:
 - la especificación 0.15 (el tag `spec-v0.15` de `datekeys-go`): lee los formatos de cápsula 1 a 3 y escribe el 3, y el 2 solo como generador de vectores (§62.1, regla 1);
 - el objeto release y el release en la mano (§47.1, §49, §50, §63 pasos 9.c y 10): lee el objeto release y el JSON de drand con los textos de Go, busca la ronda en un archivo de releases local y abre con un release en la mano aunque el reloj vaya atrasado; `/inspect` acepta el release pegado o en un fichero;
 - la firma de autor de `alg` 1, con las claves `dkauthor1…`, y la de `alg` 2 con certificados, y el sello RFC 3161: las evalúa al abrir con los veredictos de Go y las escribe con los enganches del escritor;
@@ -57,9 +57,9 @@ La inspección (pasos 1 a 8) no importa ninguna dependencia. Funciona en navegad
 | `bls12381.ts` | Pertenencia de claves públicas BLS12-381 comprimidas (G1 y G2) al subgrupo, como `FromCompressed` de kilic | `kyber-bls12381` |
 | `ibe.ts` | IBE-CCA de tlock sobre G2 para Quicknet (§63 paso 11): `decryptOnG2` y `encryptOnG2RFC9380` (Qid = H(id) en G1 con el DST de RFC 9380, sigma aleatorio, U = r·G2), con la puerta de codificación canónica de `bls12381.ts` sobre la firma y U; H2 sobre GT serializado en el orden de kilic (nunca `Fp12.toBytes` de noble), H3 (`h3Base` y `h3Try`, que desplaza el primer byte de cada intento un bit a la derecha, como kyber) y H4; `roundIdentity` y `hashToG1`, el hash a G1 de RFC 9380 que usan también `release.ts` y el cifrado; el cuerpo `U ‖ V ‖ W` de 128 bytes del stanza. Errores `IbeError` con motivo (`length`, `encoding`, `identity`, `proof`) y texto fijos, sin ningún valor del cálculo; borra sigma y los hashes derivados. Sobre `@noble/curves` 2.4.0; lleva el aviso MIT de `tlock-js`, cuya estructura sigue. Lo usa la apertura (`open.ts`) | `encrypt/ibe` de drand/kyber (`DecryptCCAonG2`), `tlock.BytesToCiphertext` y `TimeUnlock` |
 | `release.ts` | Verificación local del release (§17, §51, §63 paso 10), en el orden y con los textos de `provider.Verify`:<br>1. el rango de la ronda (`ERR_DATEKEY_INVALID`);<br>2. la ronda del release antes que la firma (`ERR_ROUND_MISMATCH`);<br>3. la longitud de la firma;<br>4. la clave pinneada (`ERR_UNKNOWN_PROFILE`);<br>5. la firma: codificación canónica de un punto de G1 que no sea el infinito, y firma BLS válida de la ronda sobre `@noble/curves` 2.4.0, con el DST de RFC 9380 para G1 (`ERR_RELEASE_INVALID`).<br>Nada de noble se copia a los errores. Solo verifica el scheme de Quicknet, el único que admite un perfil desde la v0.14: un `Profile` de otro scheme, que `validateProfile` rechaza, falla aquí con `ERR_UNKNOWN_PROFILE` tras las comprobaciones de ronda (decisión 3 del plan de la fase 2). También define `ReleaseSource`, con su contrato de fuentes de red y de la corrección 6, y `suppliedRelease`, el release que entrega quien llama. Desde la v0.15, antes de la ronda compara la cadena que nombra el release, si nombra una, con la del perfil fijado (`ERR_PROFILE_MISMATCH`), y reexporta `releaseobject.ts` | `provider` (`Verify`, `ReleaseSource`) |
-| `releaseobject.ts` | El objeto release de la v0.15 (§47.1), sin noble, como `provider/release.go` y `provider/archive.go` de Go, con sus textos byte a byte:<br>- `encodeRelease`, `newReleaseObject` y `decodeRelease`, con las capas del paso 10: el tamaño, de 1 a 1024 bytes, antes de decodificar; el tipo y la versión; el schema (`ERR_NON_CANONICAL_CBOR` o `ERR_UNSUPPORTED_VERSION`);<br>- `parseRelease`, que lee además el JSON de drand cuando su primer byte que no es un espacio es `{`, como lo lee `encoding/json` de Go en su struct: claves sin distinguir mayúsculas, la última gana, `null` deja el campo sin poner, una ronda que no es un entero de 0 a 2⁶⁴ − 1 o un campo de otro tipo hacen fallar la entrada, y una ronda por encima de 2⁵³ − 1 se guarda como `bigint` para el texto de `ERR_ROUND_MISMATCH`; todo fallo es `ERR_RELEASE_INVALID`;<br>- `ReleaseSupplier`, el release en la mano (`provider.Supplier`), y `encodedRelease`;<br>- `ReleaseArchive`, el archivo de releases local, formato informativo de §50: de un `Blob` lee solo la cabecera y una firma, y cada fallo, una ronda a ceros incluida, es `ERR_RELEASE_UNAVAILABLE` | `provider` (`EncodeRelease`, `DecodeRelease`, `ParseRelease`, `Supplier`, `Encoded`, `Archive`) |
+| `releaseobject.ts` | El objeto release de la v0.15 (§47.1), sin noble, como `provider/release.go`, `provider/drandjson.go` y `provider/archive.go` de Go, con sus textos byte a byte:<br>- `encodeRelease`, `newReleaseObject` y `decodeRelease`, con las capas del paso 10: el tamaño, de 1 a 1024 bytes, antes de decodificar; el tipo y la versión; el schema (`ERR_NON_CANONICAL_CBOR` o `ERR_UNSUPPORTED_VERSION`);<br>- `parseRelease`, que lee además el JSON de drand cuando su primer byte que no es un espacio es `{`, con `parseDrandJSON`, el lector estricto de la v0.16, como `ParseDrandJSON` de Go: como mucho 8 KiB de JSON de RFC 8259 en UTF-8 válido cuyo valor es un objeto; ningún objeto repite un nombre, y los nombres se comparan exactos, punto de código a punto de código, tras decodificar sus escapes, así que `"round"` es `round` y `ROUND` otro nombre, que se ignora; el escape de un sustituto sin su pareja es JSON mal formado; `round` es un número sin signo, fracción ni exponente, de 1 a 2⁵³ − 1; `signature` y `randomness` son cadenas, y `randomness`, si viene, el SHA-256 de la firma en hexadecimal, en cualquier caja; todo fallo es `ERR_RELEASE_INVALID`. `strictJSON` y `jsonRound` son el lector y la ronda, que usan también `drand.ts` y `release-input.ts` de la página;<br>- `ReleaseSupplier`, el release en la mano (`provider.Supplier`), y `encodedRelease`;<br>- `ReleaseArchive`, el archivo de releases local, formato informativo de §50: de un `Blob` lee solo la cabecera y una firma, y cada fallo, una ronda a ceros incluida, es `ERR_RELEASE_UNAVAILABLE` | `provider` (`EncodeRelease`, `DecodeRelease`, `ParseRelease`, `ParseDrandJSON`, `Supplier`, `Encoded`, `Archive`) |
 | `open.ts` | Los pasos 9 a 18 de §63 sobre los pasos 1 a 8 de `inspectWith`, con los checks, códigos y textos de `capsule.Open`:<br>- las credenciales y el release (paso 9), que cualquier fallo de la fuente convierte en `ERR_RELEASE_UNAVAILABLE` (corrección 6). El release llega de `source`, una fuente de red, a la que no se pide nada antes de `round_time`, o de `release`, un release en la mano (v0.15), que no se compara con el reloj: `Opened.clockBehind` dice si el reloj iba por detrás, y el paso 10 empieza por decodificarlo;<br>- la verificación del release (10);<br>- `OUTER_TIME_AGE` (11), la estructura frente a `access_policy` (12) e `INNER_ACCESS_AGE` (13);<br>- `CONTROL_CBOR` (14), `header_binding` (15), `I_PAYLOAD` (16), `PAYLOAD_AGE` (17) y el commit (18).<br>Lee los dos formatos (§22, §70). En el formato 2, `INNER_ACCESS_AGE` tiene exactamente 16 stanzas (paso 12); `CONTROL_CBOR` es de la versión de schema 2, con L y la regla de relleno (14); el paso 16 calcula P, y el 17 exige un texto en claro de exactamente P bytes con ceros tras el contenido, `ERR_INTEGRITY` en otro caso. Solo se entregan los L primeros bytes, nunca el relleno (§29.1, §56). `Opened` da el formato y, en los formatos 2 y 3, L, la regla y P.<br>En el formato 3, el paso 17 lo hace `open3.ts`, y los ficheros van a `sink`; sin él, `open` rechaza con un `TypeError` justo tras el paso 2, antes de pedir nada, como `ErrSinkRequired`. `Opened` da entonces el head, los veredictos del área de seguridad y el tamaño del área.<br>Abre los tres ficheros `age` con el `Decrypter` de `age-encryption` y con identidades propias que aplican las reglas de `agewrap`: la de tiempo, sobre `ibe.ts`; las de acceso y payload, sobre `x25519.ts`, stanza a stanza. Los fallos de `age` que no informa una identidad son `ERR_INTEGRITY` con el motivo fijo de su fase, cabecera o STREAM, sin copiar el texto de `age-encryption`.<br>La entrada puede ser un `Uint8Array` o un `Blob`, como un `File`. De un `Blob` solo se lee el prefijo de los pasos 1 a 8 (`prefix.ts`), el `capsule_digest` de la `.dkk` se calcula sobre su stream (`digest.ts`) y `PAYLOAD_AGE` se descifra en streaming.<br>El texto en claro va a memoria o a `output`, un `WritableStream`. Se escribe a medida que `age` autentica cada chunk, se cierra solo tras el paso 18 y se aborta ante cualquier fallo, en cualquier paso (§56). Un fallo del stream de salida es `ERR_INTEGRITY` con su texto, como en Go. El `WritableStream` de un fichero OPFS guarda lo escrito en un fichero de intercambio hasta el cierre: comprobado en el navegador, un fallo de STREAM deja intacto el contenido anterior | `capsule.Open`, `agewrap` (`TimeIdentity`, `AccessIdentity`, `PayloadIdentity`) |
-| `encrypt.ts`, `writer.ts` | Los writers. `encryptFiles(files, opts)` escribe un `.dkc` de formato 3, como `capsule.EncryptFiles`: comprueba las rutas y los textos con las reglas del lector y con los textos de Go, pone los ficheros en el orden de los bytes de sus rutas, mide L con un head de sal y hashes a cero, lee cada fichero dos veces y falla si cambió entre las dos lecturas; el head, el control y el área de seguridad se decodifican antes de escribir. El área de seguridad mide 32 KiB sea lo que sea lo que guarde la cápsula (§62.1, regla 13), y va vacía o con la firma y el sello de los enganches de Go: `authorKey` firma con `alg` 1 (un `AuthorKey` de `authorkey.ts` o cualquier `AuthorSigner`), `cmsSigner` con `alg` 2, la firma con certificados, y `sealer` pide el sello de `seal_type` 2; `largeArea` deja ensanchar el área a 64 KiB solo si lo firmado no cabe en 32 KiB. Los enganches pueden ser asíncronos. Se comprueban como en `newSealer` de Go, en su orden y con sus textos: una sola firma, y con `cmsSigner` los sellos van dentro de cada firma. Se llaman cuando el control y el head ya son los finales y antes de escribir nada: la firma se compromete con ellos y el sello con la firma (§29.8, §29.11). El área se evalúa con el lector de la librería en el contexto de la cápsula antes de escribirla, como `security` de Go, y una firma que no daría F4 o F6, o un sello que no daría S4 o S5, la hace fallar con el texto de Go (reglas 17, 19 y 21). Lo que lanza `cmsSigner` o `sealer` llega con `capsule: signing: ` o `capsule: sealing: ` y su mensaje, y el error como `cause`. `publicNote` es la nota pública de la cabecera (§24.1), que se rechaza con los textos de `extension.CheckNote` tras `capsule: `, y nunca se corrige; las opciones se comprueban en el orden de `newSealer` de Go. Con un área de 512 bytes, que solo puede pedir un generador de vectores, reproduce byte a byte `PRELUDE`, PUBLIC_HEADER, CONTROL_CBOR y `BODY` de los cinco fixtures que escribió `EncryptFiles` en la v0.10. `fileSource` hace la fuente de un `File`.<br>El formato 2 solo lo escribe un generador de vectores (§62.1, regla 1). `encrypt(src, opts)` tiene la forma de `capsule.Encrypt`, pero sus opciones no pueden pedirlo, así que falla con el texto de Go. Lo que solo pide un generador, el formato 2 y otra área (`TestVectors`, como `EncryptOptions.TestVectors` de Go), solo lo pasan al núcleo los ayudantes de `testing/encrypt.ts` (`encryptVectors`, `encryptWith` y `encryptFilesWith`), que ninguna página puede cargar. Con ellos, las pruebas y los scripts escriben un `.dkc` de formato 2, sin head, área ni nota, y, si se pide, una `.dkk` portable (§61, §62, §62.1), en el orden y con los textos y códigos de `capsule.Encrypt`:<br>- el formato 2 siempre; L conocida de antemano (el tamaño de un `Uint8Array` o un `Blob`, o `length` con un `ReadableStream`), y una fuente que da más o menos bytes falla con los textos de Go;<br>- el relleno `reforzado` por defecto, o `bloque256`;<br>- de 1 a 16 credenciales, canónicas y no de orden bajo, un señuelo en cada hueco libre, cuyo escalar se borra al derivar su clave pública, y un orden uniforme de los 16 (`random.ts`);<br>- `SEALED_CONTROL_LEN` con la fórmula del §62.1, comprobada con el sellado real;<br>- las autocomprobaciones de la regla 11 y dos más: `OUTER_TIME_AGE` con las reglas del lector, y la cabecera de `PAYLOAD_AGE`, que `I_PAYLOAD` abre antes de escribir nada.<br>Nada se escribe hasta que todo lo anterior al contenido está comprobado. El contenido va en trozos de 64 KiB, seguido de los ceros del relleno, con presión inversa, hacia memoria (hasta `MAX_MEMORY_DKC`, 1 GiB) o hacia `output`, que se cierra solo con la cápsula completa y comprobada y se aborta ante cualquier fallo. Los errores de la fuente y de la salida se relanzan tal cual.<br>El núcleo, `writer.ts`, recibe la aleatoriedad de quien lo llama: `encrypt.ts` le da la de `crypto.getRandomValues`, y solo `testing/encrypt.ts` la fija, para reproducir los fixtures de Go | `capsule.Encrypt`, `accesskey.Encode` |
+| `encrypt.ts`, `writer.ts` | Los writers. `encryptFiles(files, opts)` escribe un `.dkc` de formato 3, como `capsule.EncryptFiles`: comprueba las rutas y los textos con las reglas del lector y con los textos de Go, pone los ficheros en el orden de los bytes de sus rutas, mide L con un head de sal y hashes a cero, lee cada fichero dos veces y falla si cambió entre las dos lecturas; el head, el control y el área de seguridad se decodifican antes de escribir. El área de seguridad mide 32 KiB sea lo que sea lo que guarde la cápsula (§62.1, regla 13), y va vacía o con la firma y el sello de los enganches de Go: `authorKey` firma con `alg` 1 (un `AuthorKey` de `authorkey.ts` o cualquier `AuthorSigner`), `cmsSigner` con `alg` 2, la firma con certificados, y `sealer` pide el sello de `seal_type` 2; `largeArea` deja ensanchar el área a 64 KiB solo si lo firmado no cabe en 32 KiB. Los enganches pueden ser asíncronos. Se comprueban como en `newSealer` de Go, en su orden y con sus textos: una sola firma, y con `cmsSigner` los sellos van dentro de cada firma. Se llaman cuando el control y el head ya son los finales y antes de escribir nada: la firma se compromete con ellos y el sello con la firma (§29.8, §29.11). El área se evalúa con el lector de la librería en el contexto de la cápsula antes de escribirla, como `security` de Go, y una firma que no daría F4 o F6, o un sello que no daría S4 o S5, la hace fallar con el texto de Go (reglas 17, 19 y 21). Desde la v0.16, `Encrypted.security` da los veredictos del área escrita, como `Result.Security` de Go: un sello sin `accuracy` se escribe, pero da S5, o la línea de su firmante en F6, con su motivo, para que quien escribe avise de él y ofrezca pedir otro (regla 19). Lo que lanza `cmsSigner` o `sealer` llega con `capsule: signing: ` o `capsule: sealing: ` y su mensaje, y el error como `cause`. `publicNote` es la nota pública de la cabecera (§24.1), que se rechaza con los textos de `extension.CheckNote` tras `capsule: `, y nunca se corrige; las opciones se comprueban en el orden de `newSealer` de Go. Con un área de 512 bytes, que solo puede pedir un generador de vectores, reproduce byte a byte `PRELUDE`, PUBLIC_HEADER, CONTROL_CBOR y `BODY` de los cinco fixtures que escribió `EncryptFiles` en la v0.10. `fileSource` hace la fuente de un `File`.<br>El formato 2 solo lo escribe un generador de vectores (§62.1, regla 1). `encrypt(src, opts)` tiene la forma de `capsule.Encrypt`, pero sus opciones no pueden pedirlo, así que falla con el texto de Go. Lo que solo pide un generador, el formato 2 y otra área (`TestVectors`, como `EncryptOptions.TestVectors` de Go), solo lo pasan al núcleo los ayudantes de `testing/encrypt.ts` (`encryptVectors`, `encryptWith` y `encryptFilesWith`), que ninguna página puede cargar. Con ellos, las pruebas y los scripts escriben un `.dkc` de formato 2, sin head, área ni nota, y, si se pide, una `.dkk` portable (§61, §62, §62.1), en el orden y con los textos y códigos de `capsule.Encrypt`:<br>- el formato 2 siempre; L conocida de antemano (el tamaño de un `Uint8Array` o un `Blob`, o `length` con un `ReadableStream`), y una fuente que da más o menos bytes falla con los textos de Go;<br>- el relleno `reforzado` por defecto, o `bloque256`;<br>- de 1 a 16 credenciales, canónicas y no de orden bajo, un señuelo en cada hueco libre, cuyo escalar se borra al derivar su clave pública, y un orden uniforme de los 16 (`random.ts`);<br>- `SEALED_CONTROL_LEN` con la fórmula del §62.1, comprobada con el sellado real;<br>- las autocomprobaciones de la regla 11 y dos más: `OUTER_TIME_AGE` con las reglas del lector, y la cabecera de `PAYLOAD_AGE`, que `I_PAYLOAD` abre antes de escribir nada.<br>Nada se escribe hasta que todo lo anterior al contenido está comprobado. El contenido va en trozos de 64 KiB, seguido de los ceros del relleno, con presión inversa, hacia memoria (hasta `MAX_MEMORY_DKC`, 1 GiB) o hacia `output`, que se cierra solo con la cápsula completa y comprobada y se aborta ante cualquier fallo. Los errores de la fuente y de la salida se relanzan tal cual.<br>El núcleo, `writer.ts`, recibe la aleatoriedad de quien lo llama: `encrypt.ts` le da la de `crypto.getRandomValues`, y solo `testing/encrypt.ts` la fija, para reproducir los fixtures de Go | `capsule.Encrypt`, `accesskey.Encode` |
 | `tlock.ts` | `timeRecipient`, el `Recipient` de `age-encryption` para `OUTER_TIME_AGE` (§32, §35), como `agewrap.TimeRecipient`: cifra la file key con `ibe.ts` para una ronda de un perfil pinneado y escribe el stanza `tlock <ronda> <chain hash>` de tlock. Comprueba el perfil y luego el rango de la ronda, con los textos de `NewTimeRecipient`. `age-encryption` no tiene etiquetas, así que quien escriba `OUTER_TIME_AGE` (fase 3) lo añade como único recipient | `agewrap.TimeRecipient` |
 | `lengths.ts` | El tamaño de un `.dkc` de formato 2 o 3 antes de escribirlo. Para el formato 3, `bodyLength` da L con `headLength`, que mide el head por los tamaños de sus elementos CBOR sin codificarlo ni cargar las tablas de Unicode, y `mtimeSeconds` y `headComment` dan la mtime y el comentario tal como el writer los guarda. Para los dos formatos: `sealedControlLength`, la fórmula de `SEALED_CONTROL_LEN` del §62.1 con la que el writer comprueba su sellado, y `capsuleLength`, el tamaño exacto que escriben los writers para una ronda, una política, L, el relleno, las extensiones y la nota pública, que la página muestra antes de cifrar porque cualquiera con el fichero lo ve (§55.2). Sin noble, `age-encryption` ni tablas de Unicode | `capsule.Encrypt`, que mide un borrador sellado |
 | `padding.ts` | El relleno del formato 2 (§29.1): los códigos 1 (`bloque256`) y 2 (`reforzado`), `paddedLength`, exacta hasta L_MAX = 2⁵³ − 2⁴⁶ (`bitlen` con `BigInt` y los redondeos con `ceil`, exactos en doubles; nunca operaciones de 32 bits, `Math.clz32` ni `Math.log2`), y la longitud de `PAYLOAD_AGE` | `capsule/padding.go` |
@@ -71,15 +71,15 @@ La inspección (pasos 1 a 8) no importa ninguna dependencia. Funciona en navegad
 | `bech32.ts` | Bech32 (BIP 173) tal como `internal/bech32` de `age`, que la referencia copia como `codec/bech32`; conserva su aviso MIT | `codec/bech32` |
 | `datekey.ts` | `dk1_` canónico con las reglas de lectura de §19 (CR, LF y todo carácter fuera del alfabeto fallan el paso 1; números JSON por su valor decimal exacto), ronda desde una fecha con precisión de nanosegundos y cota de 9999-12-31T23:59:59Z (§15), parser RFC 3339 equivalente a `time.Parse(time.RFC3339Nano, …)`; `compareInstants` e `isInstant`; `LONG_HORIZON_SECONDS` e `isLongHorizon`, el umbral de 365 días de los avisos de §53 y §50, una política de producto | `datekey` |
 | `header.ts`, `control.ts`, `accesskey.ts` | PUBLIC_HEADER, CONTROL_CBOR y `.dkk` (cuerpo y trama), decodificar y codificar, con las capas de §69.1. CONTROL_CBOR se lee y se escribe para un formato: versión de schema 1 sin las claves 6 y 7, o 2 y 3 con `payload_length` (8 bytes, hasta L_MAX) y `padding` (1 o 2); 103 bytes sin extensiones sea cual sea L | `capsule`, `accesskey` |
-| `body.ts`, `security.ts`, `head.ts` | El formato 3 (§29.2 a §29.7): la trama de `BODY` (`AREA_LEN`, `SECURITY_LEN` y `HEAD_LEN`) y los ceros del área, `ERR_INTEGRITY`; el `SECURITY_CBOR` que escriben los writers, vacío o con la firma y el sello (`encodeSecurityWith`, `encodeAuthorSignatureItem` y `encodeSealItem`), y los veredictos de la v0.11 con sus textos y las líneas que los muestran, las de un certificado con los textos del borrador v0.12 (cada nombre entre « y », la autoridad del sello de cada firmante de F6 y el aviso de que DateKeys no comprueba quién emitió los sellos): X; F0 a F6, con la firma de `alg` 1 y la de `alg` 2 comprobadas en el contexto de la cápsula; y S0 a S5, con el sello de `seal_type` 2. `evaluateSecurity` nunca lanza: una excepción al evaluar la firma da F1, y una al evaluar el sello, S2, cada una sin tocar el otro veredicto. Y el head, con las capas de §69.1: R1 y R8 en el CDDL, R8 por los bytes UTF-8 y no por el orden UTF-16 de las cadenas de JavaScript, y luego el comentario, el autor declarado, las rutas, la maquetación, R7 y R9, todo `ERR_HEAD_INVALID`, y las extensiones críticas del objeto `head` | `capsule/format3.go`, `capsule/signature.go` |
+| `body.ts`, `security.ts`, `head.ts` | El formato 3 (§29.2 a §29.7): la trama de `BODY` (`AREA_LEN`, `SECURITY_LEN` y `HEAD_LEN`) y los ceros del área, `ERR_INTEGRITY`; el `SECURITY_CBOR` que escriben los writers, vacío o con la firma y el sello (`encodeSecurityWith`, `encodeAuthorSignatureItem` y `encodeSealItem`), y los veredictos de la v0.11 con sus textos y las líneas que los muestran, las de un certificado con los textos del borrador v0.12 (cada nombre entre « y », la autoridad del sello de cada firmante de F6 y el aviso de que DateKeys no comprueba quién emitió los sellos): X; F0 a F6, con la firma de `alg` 1 y la de `alg` 2 comprobadas en el contexto de la cápsula; y S0 a S5, con el sello de `seal_type` 2. Desde la v0.16, S5 no tiene texto fijo: «No acredita que se sellara antes de la fecha de apertura: ‹motivo›.», con el motivo de `sealReasonText`, y la línea de un firmante de F6 cuyo sello no lo acredita dice «sin acreditar que fuera antes de la fecha de apertura: ‹motivo›». `evaluateSecurity` nunca lanza: una excepción al evaluar la firma da F1, y una al evaluar el sello, S2, cada una sin tocar el otro veredicto. Y el head, con las capas de §69.1: R1 y R8 en el CDDL, R8 por los bytes UTF-8 y no por el orden UTF-16 de las cadenas de JavaScript, y luego el comentario, el autor declarado, las rutas, la maquetación, R7 y R9, todo `ERR_HEAD_INVALID`, y las extensiones críticas del objeto `head` | `capsule/format3.go`, `capsule/signature.go` |
 | `authorkey.ts` | Las claves de autor de `alg` 1 (§29.9, §29.12), como el paquete `authorkey` de Go en `spec-v0.12`, con sus comprobaciones en su orden y sus textos byte a byte: `AuthorKey` (`generate` con una fuente de azar inyectable, `fromSeed`, `publicKey`, `sign`, `clear`, `secret`, y `toString`, `toJSON` y `util.inspect` que ocultan el secreto), `authorPublicString`, `parseAuthorPublic` (canónica, en la curva y no de orden pequeño), `parseAuthorSecret` y `marshalAuthorKey`. Las cadenas se leen como bytes de Go: la mayúscula y la minúscula son las de `strings.ToLower` y `strings.ToUpper` de Go, y los espacios de una línea los de `strings.TrimSpace`, con las tablas de `gounicode.ts`; un `Uint8Array` es una cadena de Go que puede no ser UTF-8. El fichero de clave: `encryptAuthorKey` lo escribe con el `Encrypter` de `age-encryption` y una frase de paso, scrypt con logN 16; `readAuthorKey` lee uno cifrado o en claro de hasta 64 KiB, con las líneas de `bufio.Scanner`, y del cifrado lee la cabecera con `age.ts`, comprueba el stanza scrypt como `ScryptIdentity` de Go con un factor máximo de 16, deja a `age-encryption` el scrypt y el MAC, y descifra el STREAM, todo con los textos de `age` de Go. A diferencia de Go, una clave borrada lanza al usarla. JavaScript no promete tiempo constante ni borrar la memoria: se borran las copias propias, no las del motor, `age-encryption` o noble, ni las cadenas. En Node 24.9, firmar tarda unos 6 ms, y escribir o leer un fichero de clave cifrado, unos 0,3 s, los del scrypt de 64 MiB | `authorkey` |
 | `ed25519sign.ts` | La firma Ed25519 (RFC 8032, 5.1.5 y 5.1.6) en código propio: `crypto_sign` de TweetNaCl, como el port de Dart, con el SHA-512 de `@noble/hashes`. Aritmética exacta en `Float64Array` (16 miembros de 16 bits en el cuerpo, 64 de 8 bits para los escalares módulo ℓ); los secretos nunca pasan por `BigInt`, una rama o un índice que dependa de ellos. Da la firma de Go byte a byte, también si la clave pública que se le da es otra | `crypto/ed25519` |
 | `gounicode.ts` | Las tablas de `unicode.ToLower`, `unicode.ToUpper` y `unicode.IsSpace` de Go 1.26 (Unicode 15.0.0) que usan `strings.ToLower`, `strings.ToUpper` y `strings.TrimSpace`, en tramos. Las genera `scripts/go-unicode-tables.go` con el SHA-256 de cada conjunto, que una prueba recalcula | `unicode` |
 | `author.ts` | Lo que se firma y se sella (§29.8, §29.11): `payload_commit`, `control_commit` sobre `CONTROL_SIG`, `head_digest`, `signers_digest`, `AUTHOR_MESSAGE` (99 bytes de ASCII) y su código, que se toma byte a byte como en Go, `SIG_PART` y `SEAL_SUBJECT`. Nada se guarda: todo se recalcula de la cápsula abierta | `capsule/signature.go` |
 | `ed25519strict.ts` | La verificación estricta de la firma de `alg` 1 (§29.9): las cuatro condiciones del perfil, con la aritmética del grupo de `@noble/curves`, cuyo `verify` usa la ecuación con cofactor y acepta lo que el perfil rechaza. Da la respuesta de Go en los 18 vectores de `ed25519_strict.json` | `internal/ed25519strict` |
 | `der.ts` | La comprobación estricta de DER que hace la firma CMS antes de mirar dentro (§29.10): longitudes definidas y mínimas, BOOLEAN, INTEGER, NULL, OID y BIT STRING canónicos, UTCTime y GeneralizedTime en sus formas de X.690 y con una fecha que existe (`parseTime` los lee), solo los tipos universales que usan los certificados, las firmas y los tokens, los tipos de cadena restringidos entre ellos, y una profundidad de 32; `setOfSorted` para los SET OF cuyo esquema conoce quien llama, que pueden repetir un elemento | `internal/der` |
-| `cms.ts` | La firma CMS (RFC 5652) de `alg` 2 y el token RFC 3161 del sello (§29.10, §29.11), con el orden de comprobaciones y los resultados de Go y la tabla cerrada de algoritmos: RSA PKCS #1 v1.5 y PSS con `BigInt`, de 2048 a 4096 bits y con un módulo impar, y ECDSA sobre P-256, P-384 y P-521 con la aritmética de `@noble/curves`, solo con el punto sin comprimir. Lee el certificado campo a campo con el perfil del §29.10 del borrador v0.12, como Go: a quién nombra (su `givenName` y su `surname` antes que su `commonName`), el emisor que dice (su `commonName` o su `organizationName`), su validez y su clave; nunca comprueba quién lo emitió ni si se revocó. Compara los OID por los bytes de su DER, acepta un SET OF que repite un elemento y cuenta como uno un certificado repetido, y un nombre conserva un U+FEFF inicial, como en Go | `internal/cms` |
-| `securitycms.ts` | Los veredictos de una firma de `alg` 2, F1, F2, F5 y F6, con cada firmante requerido y ajeno nombrado como el §29.7 del borrador v0.12 (su nombre si cumple las reglas del autor declarado, tiene como mucho 64 puntos de código y no lleva dos espacios seguidos, y si no el SHA-256 del certificado; su emisor, o el SHA-256 de su `Name`; y la autoridad de su sello), y los de un sello, S1 a S5, con su autoridad y t. `encodeSigners` escribe `SIGNERS` para el escritor, ordenado y con los textos de Go | `capsule/signature2.go` |
+| `cms.ts` | La firma CMS (RFC 5652) de `alg` 2 y el token RFC 3161 del sello (§29.10, §29.11), con el orden de comprobaciones y los resultados de Go y la tabla cerrada de algoritmos: RSA PKCS #1 v1.5 y PSS con `BigInt`, de 2048 a 4096 bits y con un módulo impar, y ECDSA sobre P-256, P-384 y P-521 con la aritmética de `@noble/curves`, solo con el punto sin comprimir. Lee el certificado campo a campo con el perfil del §29.10 del borrador v0.12, como Go: a quién nombra (su `givenName` y su `surname` antes que su `commonName`), el emisor que dice (su `commonName` o su `organizationName`), su validez y su clave; nunca comprueba quién lo emitió ni si se revocó. Compara los OID por los bytes de su DER, acepta un SET OF que repite un elemento y cuenta como uno un certificado repetido, y un nombre conserva un U+FEFF inicial, como en Go. Del token lee además, desde la v0.16, si lleva `accuracy` (`hasAccuracy`) y su política, y `tokenIsBTSP` dice si es la BTSP de ETSI EN 319 421 (0.4.0.2023.1.1) | `internal/cms` |
+| `securitycms.ts` | Los veredictos de una firma de `alg` 2, F1, F2, F5 y F6, con cada firmante requerido y ajeno nombrado como el §29.7 del borrador v0.12 (su nombre si cumple las reglas del autor declarado, tiene como mucho 64 puntos de código y no lleva dos espacios seguidos, y si no el SHA-256 del certificado; su emisor, o el SHA-256 de su `Name`; y la autoridad de su sello), y los de un sello, S1 a S5, con su autoridad y t. Desde la v0.16, un sello válido es S4, o la línea de un firmante dice «antes de la fecha de apertura», solo si el token lleva `accuracy` y t más la precisión es anterior a `round_time`; si no, S5, con el primer motivo que se cumple (`SealReason`, como en Go): `late`, sellado después o demasiado cerca; `no accuracy, BTSP`, sin `accuracy` en un token de la política BTSP, que la exige; o `no accuracy`. `encodeSigners` escribe `SIGNERS` para el escritor, ordenado y con los textos de Go | `capsule/signature2.go`, `capsule/format3.go` (`SealReason`) |
 | `note.ts` | La nota pública (§24.1): la extensión `datekeys.note` de la cabecera, de 1 a 1024 bytes de UTF-8 que cumplen las reglas del autor declarado, con los textos y el orden de `extension.CheckNote`. Una cadena con un sustituto suelto se rechaza: nunca se escribe con U+FFFD. `checkNoteData` comprueba los bytes de una nota en el orden de Go: la longitud, el UTF-8 y las reglas. `publicNote` la lee como Go, con un U+FEFF inicial que la deja inservible, y `unusableNote` distingue una nota inservible de ninguna | `extension` (`CheckNote`, `NewNote`, `Note`), `capsule` (`Header.UnusableNote`) |
 | `wordkey.ts` | La llave de palabras (§38.1): `normalizeWords` (NFD con las tablas de Unicode 18.0.0, sin las marcas U+0300 a U+036F, la minúscula simple de cada punto de código, partido por los espacios de la lista), `checkWords` (al menos 6 palabras distintas de 3 letras o más, sin controles, invisibles ni puntos sin asignar), `wordRules` (las dos, con las tablas cargadas una vez) y `wordKey`, PBKDF2-SHA256 de 600 000 rondas de Web Crypto con la sal de la cadena, la ronda y `capsule_id`. `quickWords`, `hiddenCodePoint` y `countedWords` leen con las tablas de la plataforma, para un formulario que no puede esperar a las de Unicode 18.0.0 | `wordkey.Normalize`, `Check`, `Key` |
 | `wordlist.ts` | Las palabras al azar de la llave de palabras (el SHOULD de §38.1), con los textos de Go: `generateWords` sortea `DEFAULT_WORD_COUNT` palabras distintas, 7, con `randomIndex` y `crypto.getRandomValues`; `wordBits` da su fuerza, 90 bits para 7 de 7 776; `checkWordList` rechaza una lista de menos de 2 048 palabras, con dos que son una al normalizarlas o con un carácter que no es una letra del alfabeto de su idioma, que da el código y no la lista (para `es`, de la `a` a la `z`, `á`, `é`, `í`, `ó`, `ú`, `ü` y `ñ`; para `en`, de la `a` a la `z` y el guion de las cuatro palabras compuestas de la lista de la EFF): una letra cirílica que parece latina se volvería a escribir con la latina, y la cápsula no se abriría; y `readWordList` solo acepta una lista con el SHA-256 fijado para su idioma en `WORD_LIST_SHA256`, que sea UTF-8 y que `checkWordList` acepte. Ninguna lista se da por buena, tampoco las de DateKeys. Los dados, para quien no se fía del azar del ordenador: `diceNumber` numera las palabras de una lista de 7 776 del 11111 al 66666, `diceWord` da la palabra de un número de cinco dados, `diceWords` las de varios (al menos 6 y ninguna repetida) y `diceList` es la lista numerada para imprimirla, como la publica la EFF: la de `en` es su fichero, byte a byte | `wordkey.Generate`, `CheckList`, `Bits`, `List`, `DiceNumber`, `DiceWord`, `DiceWords`, `DiceList` |
@@ -157,7 +157,7 @@ Todo el texto leído de la cápsula pasa por interpolación de texto de Svelte (
 
 Tras los pasos 1 a 8, si la cápsula es válida, la página ofrece abrirla: pasos 9 a 18 de §63 con `open` (fase 2, paso 8). Si según el reloj del dispositivo la fecha no ha llegado, lo dice, no ofrece pedir la firma a drand y deja dar un release que la persona ya tenga, porque el reloj puede ir atrasado (v0.15, paso 9.c); si ese release abre la cápsula, el resultado dice que el reloj parece ir atrasado.
 
-- **El release lo da quien abre** (decisión 4 del plan de la fase 2, confirmada el 28-09-2026): la página nunca lo pide a la red. Se pega la respuesta JSON de drand o la firma sola en hexadecimal (`release-input.ts`), y solo se leen `round` y `signature`: cualquier otro campo, como una clave pública, se ignora, porque la raíz de confianza es el perfil fijado (§11, §13). La página enlaza la URL de drand de esa ronda (`https://api.drand.sh/<chain hash>/public/<ronda>`, con `rel="noopener noreferrer"`), que abre la persona en otra pestaña. Es un release que suministra quien llama: el paso 10 lo verifica y da sus códigos (`ERR_ROUND_MISMATCH`, `ERR_RELEASE_INVALID`). En los fixtures oficiales el campo viene relleno con el release de su registro, que es el que publicó drand. Desde la v0.15 también se puede elegir un fichero con el release: el objeto release, la respuesta de drand en JSON o un archivo de releases local. Va tal cual a `open` como release en la mano (`opener.ts`), y el paso 10 lo lee con los códigos de Go; un fichero de más de 8 KiB que no es un archivo de releases no se lee, y la página lo dice. Lo pegado va como el JSON de drand, que no nombra cadena.
+- **El release lo da quien abre** (decisión 4 del plan de la fase 2, confirmada el 28-09-2026): la página nunca lo pide a la red. Se pega la respuesta JSON de drand o la firma sola en hexadecimal (`release-input.ts`), y solo se leen `round` y `signature`, con el lector estricto de la librería (v0.16, §47.1), para que la página nunca lea otra ronda que la del paso 10: un nombre repetido es JSON no válido, `ROUND` es otro campo y la ronda va de 1 a 2⁵³ − 1. Cualquier otro campo, como una clave pública, se ignora, porque la raíz de confianza es el perfil fijado (§11, §13). La página enlaza la URL de drand de esa ronda (`https://api.drand.sh/<chain hash>/public/<ronda>`, con `rel="noopener noreferrer"`), que abre la persona en otra pestaña. Es un release que suministra quien llama: el paso 10 lo verifica y da sus códigos (`ERR_ROUND_MISMATCH`, `ERR_RELEASE_INVALID`). En los fixtures oficiales el campo viene relleno con el release de su registro, que es el que publicó drand. Desde la v0.15 también se puede elegir un fichero con el release: el objeto release, la respuesta de drand en JSON o un archivo de releases local. Va tal cual a `open` como release en la mano (`opener.ts`), y el paso 10 lo lee con los códigos de Go; un fichero de más de 8 KiB que no es un archivo de releases no se lee, y la página lo dice. Lo pegado va como el JSON de drand, que no nombra cadena.
 - **Credenciales**, solo en `time_and_key`: una `.dkk` (se leen como mucho 16 MiB + 13 bytes, `readAccessKey`) o identidades `AGE-SECRET-KEY-1…`, una por línea, como un fichero de identidades de `age`. La página explica de dónde sale la identidad: del fichero que se creó con `age-keygen`, que se puede pegar entero. Un error de una línea se da por su número, nunca por su contenido, y el foco va al campo; las identidades se borran tras usarlas. En `time_only` la página no las pide y `open` no las usa.
 - **El código de la apertura se carga bajo demanda**: la página importa `opener.ts` con `import()` al pulsar "Abrir", y con él `open.ts`, noble y `age-encryption`. `opening.ts`, que construye lo que se muestra, solo importa tipos de `open.ts`. `check-build.mjs` comprueba que ninguna página carga noble, `@scure/base` ni `age-encryption` en la primera carga.
 - **El texto en claro** se muestra, cuando la cápsula se abre y es texto (`plaintextPreview`): UTF-8 imprimible, hasta 100 000 caracteres de sus primeros 128 KiB. Se muestra el CR LF de Windows como salto de línea y se omite el BOM, como hace un editor; la descarga conserva los bytes exactos. Lo que no es texto solo se ofrece para descargar. El de un fixture se abre en memoria, con su SHA-256 comparado con el del registro. El contenido va justo debajo del veredicto, antes de los pasos 9 a 18.
@@ -219,7 +219,7 @@ Rendimiento, informativo, en ese navegador con la ventana en segundo plano: una
 | `src/lib/inspector/diagnostic.ts` | Notación de diagnóstico CBOR (RFC 8949 §8) de `walk`, acotada a 16 384 caracteres |
 | `src/lib/dkc/prefix.ts` | Lectura por prefijo, que también usa la apertura: de un `.dkc` grande solo se leen 16 + PUBLIC_HEADER_LEN + SEALED_CONTROL_LEN + 2 MiB + 1 bytes, y solo 16 si los pasos 1 y 2 rechazan el prelude (otro tipo de fichero, un `.dkk`, longitudes fuera de §57), siempre con el mismo resultado que el fichero entero (lo comprueba `prefix.test.ts`) |
 | `src/lib/inspector/fixtures.ts` | Los fixtures oficiales, empaquetados desde `testdata/fixtures` |
-| `src/lib/inspector/release-input.ts` | Lee el release pegado (respuesta de drand o firma sola) y construye la URL de drand de la ronda; un fichero con el release lo lee `opener.ts` |
+| `src/lib/inspector/release-input.ts` | Lee el release pegado (respuesta de drand, con `strictJSON` y `jsonRound` de la librería, o firma sola) y construye la URL de drand de la ronda; un fichero con el release lo lee `opener.ts` |
 | `src/lib/inspector/opener.ts` | La apertura, cargada bajo demanda: identidades, `.dkk`, `open` con el release suministrado, SHA-256 del texto en claro |
 | `src/lib/inspector/opening.ts` | `buildOpenReport`: el modelo de la apertura (pasos 9 a 18, release, extensiones de CONTROL_CBOR, texto en claro), sin DOM ni reloj; nombre del fichero descifrado |
 | `src/lib/inspector/tempfile.ts` | El fichero temporal de OPFS, con un directorio y un Web Lock por pestaña y por zona (la apertura y crear), la cuota libre y la limpieza de lo que quedó. Su `writable` acepta además trozos con posición (`TempChunk`), como `FileSystemWritableFileStream`, para parchear el CRC-32 del ZIP |
@@ -238,7 +238,7 @@ Rendimiento, informativo, en ese navegador con la ventana en segundo plano: una
 
 ### Fixtures
 
-`fixtures.ts` importa con `import.meta.glob` los `.dkc` de `testdata/fixtures` como URL (`?url`) y, de cada registro JSON, solo tres campos públicos: `description`, `release` (la ronda y la firma que publicó drand, con las que la página abre el fixture) y `plaintext_sha256` (para comparar con lo descifrado). `testdata/` sigue siendo la única fuente: Vite copia cada `.dkc` como fichero con hash en `_app/immutable/assets/` y nunca lo incrusta como `data:` (`assetsInlineLimit: 0`), y no se copia nada más. Los `.dkk`, los textos en claro y los demás campos de los registros (`payload_identity`, `control_cbor`…) no llegan al sitio; `check-build.mjs` lo comprueba. En desarrollo, `server.fs.allow` deja que Vite sirva `testdata/fixtures`.
+`fixtures.ts` importa con `import.meta.glob` los `.dkc` de `testdata/fixtures` como URL (`?url`) y, de cada registro JSON, solo tres campos públicos: `description`, `release` (la ronda y la firma que publicó drand, con las que la página abre el fixture) y `plaintext_sha256` (para comparar con lo descifrado). `testdata/` sigue siendo la única fuente: Vite copia cada `.dkc` como fichero con hash en `_app/immutable/assets/` y nunca lo incrusta como `data:` (`assetsInlineLimit: 0`), y no se copia nada más. Los `.dkk`, los textos en claro y los demás campos de los registros (`payload_identity`, `control_cbor`, `words_text`…) no llegan al sitio; `check-build.mjs` lo comprueba. La descripción de `format3_time_and_key_words` (v0.16) nombra sus palabras, las del vector público del anexo, 79.7, así que en la página se abre escribiéndolas. En desarrollo, `server.fs.allow` deja que Vite sirva `testdata/fixtures`.
 
 ### Sin red: la Content-Security-Policy
 
@@ -250,12 +250,12 @@ img-src 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' 'sha25
 style-src 'self'; style-src-attr 'unsafe-hashes' 'sha256-…'; base-uri 'none'; form-action 'none'
 ```
 
-- `connect-src`: `fetch` llega al propio origen, para los fixtures, y a los tres relays públicos de drand que usa la CLI de la referencia, solo cuando la persona pulsa «Pedir la firma a drand» en `/inspect` (`drand.ts`: en carrera, 6 s, como mucho 8 KiB, sin redirecciones, y la aleatoriedad comprobada contra la firma, que el paso 10 verifica con la clave fijada). El relay ve la IP y la ronda pedida. Tampoco llega a URL `blob:`: la descarga del texto en claro es una navegación.
+- `connect-src`: `fetch` llega al propio origen, para los fixtures, y a los tres relays públicos de drand que usa la CLI de la referencia, solo cuando la persona pulsa «Pedir la firma a drand» en `/inspect` (`drand.ts`: en carrera, 6 s, como mucho 8 KiB, sin redirecciones, y la respuesta leída con `parseDrandJSON`, el lector estricto que usa desde la v0.16 el cliente de Go, con la aleatoriedad comprobada contra la firma, que el paso 10 verifica con la clave fijada). El relay ve la IP y la ronda pedida. Tampoco llega a URL `blob:`: la descarga del texto en claro es una navegación.
 - `script-src`: los módulos del sitio y el hash SHA-256 del único script en línea, el arranque de SvelteKit (los nonces no sirven en HTML prerenderizado).
 - `style-src 'self'`: solo hojas de estilo del sitio; sin fuentes web ni CDN, con las fuentes del sistema.
 - `style-src-attr`: solo el atributo `style` del anunciador de rutas de SvelteKit, por su hash (`ANNOUNCER_STYLE_HASH`, válido para `@sveltejs/kit` 2.70.3; `app.css` lo oculta también si el navegador bloquea el atributo).
 
-`npm run build` ejecuta después `scripts/check-build.mjs` (`postbuild`; también `npm run build:check`), que falla si una ruta no tiene su HTML prerenderizado; si una página no tiene exactamente esa política, con la etiqueta antes de cualquier elemento que cargue recursos; si un script en línea no está en `script-src` o sobra un hash; si `style-src-attr` no coincide con los atributos `style` del bundle; si hay estilos en línea, manejadores de eventos en atributos, `@import` o URL a otro origen; si algún `.dkc` oficial no está byte a byte; si aparece en el sitio algún secreto de los fixtures (`.dkk`, textos en claro, identidades, `payload_identity`, `access_material`, `control_cbor`); si el bundle del cliente contiene `tlock-js`, `drand-client` o helpers de Babel, o una copia anidada de un paquete que no sea la de noble bajo `@noble/post-quantum`; si contiene un test o un módulo de `src/lib/dkc/testing/`, cuyos ayudantes escriben lo que solo puede escribir un generador de vectores; si una página carga noble, `@scure/base` o `age-encryption` en su primera carga, o las claves de autor y su firma (`authorkey.ts`, `ed25519sign.ts` y `gounicode.ts`), que `/inspect` no carga ni bajo demanda, o si `/inspect` y `/create` no pueden cargar bajo demanda `age-encryption`, `@noble/curves` y `@noble/ciphers`, y `/create` también `@noble/hashes`; o si a `licenses.txt` le falta el aviso de un paquete del bundle, las líneas de copyright de un módulo de `src/` derivado de otro proyecto o la licencia del sitio. `vite.config.ts` registra los módulos de cada chunk en `.svelte-kit/output/client-modules.json`, fuera del sitio. Al terminar informa del JavaScript que carga cada página, en bytes y con gzip, en la primera carga y bajo demanda, y de los paquetes npm que lleva el bundle.
+`npm run build` ejecuta después `scripts/check-build.mjs` (`postbuild`; también `npm run build:check`), que falla si una ruta no tiene su HTML prerenderizado; si una página no tiene exactamente esa política, con la etiqueta antes de cualquier elemento que cargue recursos; si un script en línea no está en `script-src` o sobra un hash; si `style-src-attr` no coincide con los atributos `style` del bundle; si hay estilos en línea, manejadores de eventos en atributos, `@import` o URL a otro origen; si algún `.dkc` oficial no está byte a byte; si aparece en el sitio algún secreto de los fixtures (`.dkk`, textos en claro, identidades, el texto de una llave de palabras, `payload_identity`, `access_material`, `control_cbor`); si el bundle del cliente contiene `tlock-js`, `drand-client` o helpers de Babel, o una copia anidada de un paquete que no sea la de noble bajo `@noble/post-quantum`; si contiene un test o un módulo de `src/lib/dkc/testing/`, cuyos ayudantes escriben lo que solo puede escribir un generador de vectores; si una página carga noble, `@scure/base` o `age-encryption` en su primera carga, o las claves de autor y su firma (`authorkey.ts`, `ed25519sign.ts` y `gounicode.ts`), que `/inspect` no carga ni bajo demanda, o si `/inspect` y `/create` no pueden cargar bajo demanda `age-encryption`, `@noble/curves` y `@noble/ciphers`, y `/create` también `@noble/hashes`; o si a `licenses.txt` le falta el aviso de un paquete del bundle, las líneas de copyright de un módulo de `src/` derivado de otro proyecto o la licencia del sitio. `vite.config.ts` registra los módulos de cada chunk en `.svelte-kit/output/client-modules.json`, fuera del sitio. Al terminar informa del JavaScript que carga cada página, en bytes y con gzip, en la primera carga y bajo demanda, y de los paquetes npm que lleva el bundle.
 
 ### Avisos de licencia: `licenses.txt`
 
@@ -302,12 +302,13 @@ Umbrales de cobertura (`vitest.config.ts`), al 100 % en líneas, ramas, funcione
 - `testdata/vectors/padding.json`: P con las dos reglas y la longitud de `PAYLOAD_AGE` de cada L, incluidas las fronteras en que fallan las operaciones de 32 bits y un logaritmo en coma flotante, y las longitudes por encima de L_MAX, que se rechazan. `padding.test.ts` contrasta además `paddedLength` con el §29.1 escrito en `BigInt` sobre 20 000 longitudes de todo el rango.
 - `testdata/vectors/tlock_ibe.json`: el vector de H2 del IBE de tlock (§63 paso 11). Hasta que llegue `ibe.ts` (fase 2), el test lo recalcula con `@noble/curves` 2.4.0: los puntos son canónicos para `bls12381.ts`, el pairing serializado en el orden de kilic es el GT del vector y su H2 coincide; el orden propio de noble (`Fp12.toBytes`) da otro hash.
 - `testdata/vectors/tlock_steps.json`: los pasos 10 y 11 de §63 para Quicknet, valor a valor (v0.14), con el código de la librería: M con `roundIdentity`, H(M) con `hashToG1`, el release con `verifyRelease` y la ecuación de pairing; las tres partes del stanza con `ciphertextFromBody`, e(firma, U) con `gtBytes`, H2, sigma, H4 y la file key; la base de H3 con `h3Base`, cada intento con `h3Try` y su digest, el desplazamiento del primer byte y su aceptación, r con `h3`, y r·G2 = U con `proofHolds`; y `decryptOnG2` sobre el cuerpo entero. También las lecturas erróneas que descarta el generador: el DST de G2 o la ronda sin SHA-256 no verifican, y poner a cero el bit más alto en vez de desplazar el byte da otra r, que U no prueba; una firma de otra ronda y un V o un W editados no descifran.
-- `testdata/vectors/release.json` y `releases/` (v0.15): los 36 objetos y los 12 JSON de drand pasan por `parseRelease` y `verifyRelease` frente a Quicknet y la ronda de cada caso, con el resultado, el texto de Go y lo que decodifican; un objeto se reescribe a sus bytes. Cada fichero de `releases/` es el objeto de su ronda, que verifica, y las 7 consultas del archivo dan lo que dice el fichero, en memoria y desde un `Blob`. La guarda de `testdata` exige cada fichero de `releases/`.
+- `testdata/vectors/release.json` y `releases/` (v0.15): los 36 objetos y los 38 JSON de drand, 26 de ellos de la lectura estricta de la v0.16, pasan por `parseRelease` y `verifyRelease` frente a Quicknet y la ronda de cada caso, con el resultado, el texto de Go y lo que decodifican; un objeto se reescribe a sus bytes. Cada fichero de `releases/` es el objeto de su ronda, que verifica, y las 7 consultas del archivo dan lo que dice el fichero, en memoria y desde un `Blob`. La guarda de `testdata` exige cada fichero de `releases/`.
 - `testdata/vectors/mutations.json`: se leen los 222 casos enteros (ediciones sobre un fixture o hex congelado, release, su fuente, reloj, registro, extensiones, `.dkk`, identidades y, en los once del formato 3 que abren, sus veredictos). Cada caso usa la fuente que dice su campo `source`, como `singleSource` de Go: `supplied`, un release en la mano que se da a `open` como objeto release, con la cadena de Quicknet salvo que el caso nombre otra, o `network`, una fuente que verifica el release y lo descarta. Los 222 pasan por `open` con su release, su reloj, su registro, sus extensiones, su `.dkk`, sus identidades y un `MemorySink`, y dan el mismo código en el mismo paso que Go y el mismo texto que `capsule.Open` (`testing/mutation-texts.json`); los cuatro de seguridad del formato 3 abren con los veredictos X, F1, F2 y S1 del registro, y siete de la lista de la v0.11 con los suyos. «round not reached yet», del formato 1, abre con el release en la mano y el reloj atrasado. También pasan como `Blob` con un stream de salida, que termina abortado en los 210 que fallan, y un sumidero que nunca se publica. Son los 178 del §64: las 33 mutaciones de las dos primeras listas en cada formato, las 23 de la lista del formato 2, las 48 de la del formato 3 y las 8 de la lista de la v0.11; y 44 más. Ninguno de los que fallan sin red pide un release. Los 57 de los pasos 1 a 8 pasan además por `inspect`, y un test fija los recuentos y el orden. Las `.dkk` ofrecidas se decodifican.
 - `testdata/vectors/inspect_differential.json`: las 5 110 mutaciones de los catorce fixtures de base dan el mismo veredicto, código y paso que Go; los `bases` se comprueban por su SHA-256.
 - `testdata/vectors/paths.json` y `path_fold.json`, con las tablas cuyo digest nombran: cada ruta pasa por las reglas de una entrada con el texto exacto, cada árbol por la decodificación de un head de ficheros de 0 bytes, y cada segmento da su NFD y su clave de R7.
 - `testdata/vectors/head_schema.json` y `security.json`: cada head pasa por `decodeHead` con el código de la primera capa que falla y el texto exacto de `ERR_HEAD_INVALID`, y un head válido se reescribe a sus bytes; cada área de seguridad da, en el contexto del fichero, sus veredictos y sus líneas.
-- `testdata/vectors/security_cms.json`: los 135 casos de `alg` 2 y de `seal_type` 2 dan, en su contexto, los veredictos, el resultado de cada firmante exigido y de cada ajeno, la autoridad y la hora del sello y las líneas de Go, byte a byte. `ed25519_strict.json` lo corre `ed25519strict.test.ts`.
+- `testdata/vectors/security_cms.json`: los 143 casos de `alg` 2 y de `seal_type` 2, hechos de nuevo para la v0.16, dan, en su contexto, los veredictos, el resultado de cada firmante exigido y de cada ajeno, la autoridad y la hora del sello, el motivo (`seal_reason`) de un S5 o de un firmante cuyo sello no acredita la fecha, y las líneas de Go, byte a byte.
+- `format3_time_and_key_words` y `format3_full_chunk` (v0.16): el primero abre con la identidad que dan las palabras de su `words_text`, normalizadas con `normalizeWords` y derivadas con `wordKey` con la cadena, la ronda y su `capsule_id`, que es la de `identities`, y también en la página con el texto tal cual y con sus marcas sueltas; el segundo, cuyo `PAYLOAD_AGE` acaba en un trozo STREAM completo, abre a su fichero. `ed25519_strict.json` lo corre `ed25519strict.test.ts`.
 - `testdata/vectors/note.json`: cada nota pasa por `checkNoteData`, con su resultado y el texto exacto de la regla que incumple, y por `publicNote`, `unusableNote` y `newNote`.
 - `testdata/vectors/locator.json`: se corre entero, como `TestLocatorVectors` de Go, con los textos de Go de `testing/locator-vectors.json` y `testing/locator-uris.json`: la extensión se lee, el localizador se abre con el release de su ronda y da su texto en claro de 4096 bytes y sus campos, el resto se encuentra en el host en su desplazamiento y abre el sobre; las 36 bases de relleno; las 247 direcciones, con el veredicto del fichero y el texto de Go; el localizador mixto, del que se usa solo la dirección que se acepta y que un escritor no escribe; los 5 restos, los 8 datos de la extensión, con `ERR_EXTENSION_DATA_INVALID` como único código, y los 16 textos en claro.
 - `src/lib/dkc/testing/locator-uris.json` y `locator-vectors.json`: el localizador sin su escritura contra Go en `spec-v0.12`, que comprueban `locator.test.ts` y `envelope.test.ts`, todo con el resultado y el texto de Go. Los escribe `scripts/locator-go-vectors.go`, el generador de la etapa 7a de `datekeys-dart` con las semillas de este repositorio:
@@ -319,7 +320,7 @@ Umbrales de cobertura (`vitest.config.ts`), al 100 % en líneas, ramas, funcione
 - `src/lib/dkc/testing/locator-seal.json`: lo que escriben `Seal` y `NewEnvelope` de Go mientras `crypto/rand` lee el keystream de una semilla (ChaCha20 bajo el SHA-256 de la semilla, nonce a cero), con cada valor que saca. Lo escribe `scripts/locator-seal-go-vectors.go`, y `envelope.test.ts` lo comprueba con `seededFill` de `testing/seeded.ts`, la misma fuente: `seal` y `newEnvelope` sacan los mismos valores en el mismo orden y escriben los mismos bytes en los 10 sellados, de uno a tres bloques y de la ronda 1 a la última de Quicknet, en los 8 sobres, de 0 bytes a 1 MiB, y en el camino entero; y rechazan las 12 entradas que rechaza Go, con su texto y antes de sacar nada. Se regenera como el anterior, con `-source spec-v0.12`.
 - `src/lib/dkc/testing/locator-interop.json`: Go abre lo que escribe esta librería. `scripts/locator-ts-samples.mjs` escribe los ficheros de las recetas de `testing/locator-interop.ts`, siete localizadores sellados con sus sobres, de un `.dkc` de 0 bytes a uno de 16 MiB y un byte, en el que el contador del nonce de STREAM pasa de un byte; `scripts/locator-go-verdicts.go` los abre con `locator.Open`, comprueba que `Marshal` da el texto sellado y que se usan todas sus direcciones, abre el sobre con `OpenEnvelope` y busca el resto escondido con `Hide` y `RestIn`. `locator.interop.test.ts` vuelve a escribir cada fichero de su receta, exige el SHA-256 que leyó Go y lo abre también. Para regenerarlo: `node scripts/locator-ts-samples.mjs DIR`, y desde la exportación de `datekeys-go`, `go run .../scripts/locator-go-verdicts.go -source spec-v0.12 -testdata .../testdata -samples DIR > locator-interop.json`.
 - `src/lib/dkc/testing/zip-vectors.json`: cómo lee `archive/zip` de Go los ZIP de la página. `scripts/zip-ts-samples.mjs` escribe con `ZipSink` las muestras de `testing/zip.ts` en un directorio: ficheros en carpetas con nombres fuera de ASCII y todas las clases de fecha (1970, 2³¹ − 1, 2³¹, 9999 y ninguna, que toma la hora de la ronda), un fichero dentro de una carpeta, y 65 535 ficheros, que hacen el ZIP64 por número de entradas. `scripts/zip-go-read.go`, solo con la biblioteca estándar, registra el SHA-256 de cada ZIP y una línea por entrada: nombre, bit 11, método, CRC-32, tamaños, fecha leída de los campos extra y SHA-256 del contenido, leído con el CRC comprobado. `zipsink.test.ts` vuelve a escribir cada muestra, exige su SHA-256 y calcula las líneas que Go tiene que dar. Para regenerarlo: `node scripts/zip-ts-samples.mjs DIR > zip-samples.json` y `go run scripts/zip-go-read.go DIR zip-samples.json > zip-vectors.json`.
-- `src/lib/dkc/testing/mutation-texts.json`: el texto del error de `capsule.Open` para cada caso de `mutations.json`, u `ok`. Lo escribe `scripts/mutation-go-texts.go`, que reproduce los casos como `internal/testkit` de la referencia, que un módulo de fuera no puede importar: el perfil de Quicknet o ninguno, una fuente con el release del caso, como `OpenOptions.Release` o como `OpenOptions.Source` según su campo `source` (v0.15), la `.dkk` ya decodificada, las identidades, las extensiones del caso con los textos de `testkit.KnownExtensions` y un sumidero que descarta. Comprueba cada código contra el corpus. Para regenerarlo, desde un módulo Go temporal como el de abajo: `go run mutation-go-texts.go ../datekeys-ts/testdata > mutation-texts.json`.
+- `src/lib/dkc/testing/mutation-texts.json`: el texto del error de `capsule.Open` para cada caso de `mutations.json`, u `ok`. Lo escribe `scripts/mutation-go-texts.go`, que reproduce los casos como `internal/testkit` de la referencia, que un módulo de fuera no puede importar: el perfil de Quicknet o ninguno, una fuente con el release del caso, como `OpenOptions.Release` o como `OpenOptions.Source` según su campo `source` (v0.15), la `.dkk` ya decodificada, las identidades, las extensiones del caso con los textos de `testkit.KnownExtensions` y un sumidero que descarta. Comprueba cada código contra el corpus. Para regenerarlo, desde un módulo Go temporal como el de abajo: `go run mutation-go-texts.go ../datekeys-ts/testdata > mutation-texts.json`. Se regeneró con `4f78854` (v0.16): solo cambió su campo `spec`.
 - `src/lib/dkc/testing/ibe-vectors.json`: los valores de referencia de `ibe.ts`. Los escribe `scripts/ibe-go-vectors.go` con kyber, tlock y `age`, las librerías de la referencia Go, y `ibe.test.ts` los comprueba todos:
   - el GT de e(G1, G2) y de su cuadrado, con H2 de 16 y 32 bytes;
   - H3 y H4 sobre entradas fijas, entre ellas una H3 aceptada en la segunda iteración y otra en la tercera;
@@ -334,7 +335,7 @@ Umbrales de cobertura (`vitest.config.ts`), al 100 % en líneas, ramas, funcione
 
   Para regenerarlo: `node scripts/tlock-ts-samples.mjs > ts-samples.json`, y desde el mismo módulo Go temporal, `go run tlock-go-vectors.go ts-samples.json > tlock-vectors.json`.
 
-  En `ibe-vectors.json`, H2, H3 y H4 no son públicas en kyber: el script las reescribe con sus etiquetas y las comprueba en cada fixture contra la file key de tlock y contra U = r·G2. Los cifrados de kyber usan un sigma aleatorio, así que el fichero se genera una vez y se congela. Para regenerarlo, desde un módulo Go temporal que requiera la referencia (`replace g.activething.com/go/DateKeys => ../datekeys-go`, `GOFLAGS=-mod=mod`, y la directiva `go` de la referencia, para que se use su toolchain): `go run ibe-go-vectors.go ../datekeys-ts/testdata/fixtures > ibe-vectors.json`. Los siete fixtures del formato 2 se añadieron el 29-09-2026 así, sobre `spec-v0.9`, tomando solo el bloque `fixtures`: los valores de los cinco anteriores salieron idénticos, y el resto del fichero no cambió. Los nueve del formato 3 se añadieron igual el 30-09-2026, sobre `spec-v0.10`, con los doce anteriores idénticos. El 01-10-2026, sobre `spec-v0.11`, se añadieron `format3_signed`, `format3_signed_cms` y `format3_sealed`, y se rehicieron los dos de `format3_signature_unsupported` y `format3_seal_unsupported`, que Go regeneró con `alg` 4294967295; los demás salieron idénticos.
+  En `ibe-vectors.json`, H2, H3 y H4 no son públicas en kyber: el script las reescribe con sus etiquetas y las comprueba en cada fixture contra la file key de tlock y contra U = r·G2. Los cifrados de kyber usan un sigma aleatorio, así que el fichero se genera una vez y se congela. Para regenerarlo, desde un módulo Go temporal que requiera la referencia (`replace g.activething.com/go/DateKeys => ../datekeys-go`, `GOFLAGS=-mod=mod`, y la directiva `go` de la referencia, para que se use su toolchain): `go run ibe-go-vectors.go ../datekeys-ts/testdata/fixtures > ibe-vectors.json`. Los siete fixtures del formato 2 se añadieron el 29-09-2026 así, sobre `spec-v0.9`, tomando solo el bloque `fixtures`: los valores de los cinco anteriores salieron idénticos, y el resto del fichero no cambió. Los nueve del formato 3 se añadieron igual el 30-09-2026, sobre `spec-v0.10`, con los doce anteriores idénticos. El 01-10-2026, sobre `spec-v0.11`, se añadieron `format3_signed`, `format3_signed_cms` y `format3_sealed`, y se rehicieron los dos de `format3_signature_unsupported` y `format3_seal_unsupported`, que Go regeneró con `alg` 4294967295; los demás salieron idénticos. El 07-10-2026, sobre `4f78854` (v0.16), se añadieron `format3_full_chunk` y `format3_time_and_key_words`, con los 26 anteriores y el resto del fichero idénticos.
 - El writer (`encrypt.test.ts`, `encrypt.stream.test.ts`, `encrypt.internal.test.ts`, `encrypt.property.test.ts`):
   - con los valores de su registro, reproduce byte a byte el PRELUDE, PUBLIC_HEADER, `header_binding` y CONTROL_CBOR de los siete fixtures de formato 2 de Go, con las mismas longitudes; cada credencial cae en el hueco del registro y la `.dkk` sale igual, salvo su `capsule_digest`;
   - lo que escribe se abre con `open`: las dos políticas, de 1 a 16 credenciales, cada una sola y todas juntas; contenidos en todos los bordes de trozo y de relleno, hasta 5 000 000 de bytes, con las dos reglas; rondas 1000, 1001 y 2000;
@@ -355,13 +356,15 @@ Umbrales de cobertura (`vitest.config.ts`), al 100 % en líneas, ramas, funcione
 
   Para regenerarlo, en una exportación `git archive` de `datekeys-go` en el tag `spec-v0.12`, sin tocar el repositorio: las órdenes están en la cabecera del script. Todos los valores salen de Go, y cada ejecución escribe los mismos bytes.
 - `src/lib/dkc/gounicode.ts` lo escribe `scripts/go-unicode-tables.go` con el toolchain de Go 1.26 (`go run scripts/go-unicode-tables.go -out src/lib/dkc/gounicode.ts`), y comprueba sus tramos contra las funciones de Go en cada punto de código.
-- `src/lib/dkc/testing/signing-vectors.json`: los enganches del escritor contra `capsule.EncryptFiles` de Go, que comprueba `encrypt.signing.test.ts`. Lo escribe `scripts/signing-go-vectors_test.go`, que importa paquetes internos y corre como prueba en una exportación `git archive` de `spec-v0.12`:
+- `src/lib/dkc/testing/signing-vectors.json`: los enganches del escritor contra `capsule.EncryptFiles` de Go, que comprueba `encrypt.signing.test.ts`. Lo escribe `scripts/signing-go-vectors_test.go`, que importa paquetes internos y corre como prueba en una exportación `git archive` de `datekeys-go`, hoy de `4f78854`:
   - 23 recetas de formato 3 en `time_only`, para la ronda 1000. Go escribe cada cápsula con `crypto/rand` leyendo un flujo ChaCha20 fijo, y guarda cada valor en su orden, y lo que recibió y devolvió cada enganche: una clave de autor de una semilla, y las firmas CMS y los tokens RFC 3161 de `internal/cms/cmstest`, cuyos ECDSA y RSA fija `cryptotest.SetGlobalRandom`;
-  - con esos valores y esas firmas, `encryptFiles` escribe las ocho cápsulas de Go byte a byte: `alg` 1, `alg` 1 y un sello, un sello solo, uno posterior a la fecha (S5), `alg` 2 con dos firmantes sellados, `alg` 2 en un área de 64 KiB, `largeArea` sin ensanchar y un área de 512 bytes de generador de vectores. Pide la firma y el sello sobre los mismos mensajes, y lee en lo que escribe los veredictos y las líneas de `capsule.Open`, también con la clave guardada (F3). La prueba entrega a `age-encryption` y a `ibe.ts` los valores de Go por `crypto.getRandomValues`, sin el sellado de medida de Go, que esta librería calcula con una fórmula, ni las etiquetas al azar de sus recipients, que `age-encryption` no saca, y deja pasar el cegado de las multiplicaciones de noble, que no cambia ningún resultado;
+  - con esos valores y esas firmas, `encryptFiles` escribe las ocho cápsulas de Go byte a byte: `alg` 1, `alg` 1 y un sello, un sello solo, uno posterior a la fecha (S5, `late`), `alg` 2 con dos firmantes sellados, `alg` 2 en un área de 64 KiB, `largeArea` sin ensanchar y un área de 512 bytes de generador de vectores. Pide la firma y el sello sobre los mismos mensajes, y lee en lo que escribe los veredictos y las líneas de `capsule.Open`, también con la clave guardada (F3). La prueba entrega a `age-encryption` y a `ibe.ts` los valores de Go por `crypto.getRandomValues`, sin el sellado de medida de Go, que esta librería calcula con una fórmula, ni las etiquetas al azar de sus recipients, que `age-encryption` no saca, y deja pasar el cegado de las multiplicaciones de noble, que no cambia ningún resultado;
   - las otras 15 fallan con el texto de Go: las exclusiones, el área de prueba con `largeArea`, una clave de 31 bytes, una firma de ceros (F2), una firma CMS sin un firmante exigido (F5, con el nombre), sin sellos o que no es una firma (F1), un área que no cabe en 32 KiB o en 64 KiB, `SIGNERS` vacío o repetido, y la aplicación de firma o la autoridad que fallan;
   - `samples`: cinco cápsulas que `scripts/signing-ts-samples.mjs` escribe con `encryptFiles`, sus propios valores al azar, un `AuthorKey` nuevo y los certificados, firmas y tokens de `testing/cmsbuild.ts`. `capsule.Open` de Go las abre a sus ficheros y les da los mismos veredictos y las mismas líneas que esta librería.
 
   Para regenerarlo: `node scripts/signing-ts-samples.mjs > ts-signing.json`, y la prueba de Go con `-samples ts-signing.json`; las órdenes están en la cabecera del script. Las cápsulas de Go salen igual en cada ejecución; las muestras son aleatorias y se congelan.
+
+  Se regeneró el 07-10-2026 en una exportación de `4f78854` (v0.16), con las mismas cinco muestras, cuyo `ts` se volvió a leer con esta librería. Las cápsulas y los errores salen byte a byte iguales; cambian lo que lee `capsule.Open` y un texto de error: los tokens del sellador de Go y los de las muestras no llevan `accuracy`, así que los cinco sellos válidos dan ahora S5, «el sello no dice su precisión», el posterior a la fecha da su motivo, `late`, y la firma de ceros con sello falla con «F2 and S5».
 - `src/lib/dkc/testing/capsule-vectors.json`: la interoperabilidad de los writers con Go a nivel de cápsula (plan de la fase 3, sección 8, punto 9, y paso 4 del plan del formato 3), que comprueba `interop.test.ts`. Se regeneró el 02-10-2026 con el escritor de la v0.11, contra `spec-v0.11`. `scripts/capsule-ts-samples.mjs` escribe con `encryptVectors` de `testing/encrypt.ts`, como generador de vectores, trece cápsulas de formato 2 para las rondas 1000, 1001 y 2000:
   - `time_only` de 0, 46, 65 536 y 78 000 bytes, con las dos reglas de relleno;
   - `time_and_key` con una clave portable, con tres recipients y una clave portable, y con dieciséis recipients;
@@ -472,7 +475,7 @@ Comprueba que los ficheros coinciden con `SOURCE.json`, sin faltantes ni sobrant
 
 `.gitattributes` marca `testdata/**` y `wordlists/**` como binarios para que git no altere ningún byte.
 
-Copia actual: la de `testdata/SOURCE.json`, `datekeys-go` en `aefc8f6`, de la rama `v0.15` después del tag `spec-v0.15`, que se sincroniza con `node scripts/sync-testdata.mjs sync --commit aefc8f6`. Del mismo commit vienen `wordlists/` y `annex/`, el anexo de recuperación. Su `testdata` es el del tag (`fe50885`), que añade `vectors/release.json`, los ficheros de `releases/` y el campo `source` de `mutations.json`; y trae `wordkey/lists`, con la lista inglesa de la EFF y la española. La página solo publica la española.
+Copia actual: la de `testdata/SOURCE.json`, `datekeys-go` en `4f78854`, el borrador v0.16 de la rama `v0.16`, que se sincroniza con `node scripts/sync-testdata.mjs sync --commit 4f78854`. Del mismo commit vienen `wordlists/` y `annex/`, el anexo de recuperación, que es ya el §79 del borrador v0.16, con la licencia CC BY-ND 4.0 de la especificación en su título y la llave de palabras en 79.7. Sobre el `testdata` de `spec-v0.15` (`fe50885`), el de la v0.16 cambia el campo `spec` de cada fichero a `0.16`, hace de nuevo `vectors/security_cms.json`, con 143 casos y `seal_reason`, añade a `vectors/release.json` los 26 casos de la lectura estricta del JSON de drand y a `vectors/wordkey.json` el vector del anexo, y trae dos fixtures, `format3_time_and_key_words` y `format3_full_chunk`. `wordkey/lists` trae la lista inglesa de la EFF y la española; la página solo publica la española.
 
 ## Licencia
 
diff --git a/annex/SOURCE.json b/annex/SOURCE.json
index e278b2e..ac6f829 100644
--- a/annex/SOURCE.json
+++ b/annex/SOURCE.json
@@ -1,7 +1,7 @@
 {
   "module": "g.activething.com/go/DateKeys",
-  "commit": "aefc8f6dfe89037d71e22d5338a092ff21159429",
+  "commit": "4f7885495bd6ea666cb444519090fb5f3ea46752",
   "files": {
-    "recovery.md": "c8c9b8815708d963ca6a3d688003bdc5046c499ab034a2d8c98a18c9811d3bd3"
+    "recovery.md": "c284a263fe0b94f7cf7d179bd2878c331a42e97c57620b57871646a0a0e80a58"
   }
 }
diff --git a/annex/recovery.md b/annex/recovery.md
index 03b5df6..30d5d19 100644
--- a/annex/recovery.md
+++ b/annex/recovery.md
@@ -1,6 +1,6 @@
 # Cómo abrir una cápsula DateKeys sin software de DateKeys
 
-Este texto acompaña a una cápsula del tiempo de DateKeys, un fichero `.dkc`: dice cómo abrirla, llegada su fecha, sin ningún software de DateKeys, por si ya no existe. Es el anexo informativo §79 de la especificación del protocolo DateKeys v0.15, cuyo texto tiene el SHA-256 45105e693be4187af4dd30f4d254402612587b6427c746f5d29f07a541c1e3f3. Es el mismo para toda cápsula: no lleva ningún dato de esta.
+Este texto acompaña a una cápsula del tiempo de DateKeys, un fichero `.dkc`: dice cómo abrirla, llegada su fecha, sin ningún software de DateKeys, por si ya no existe. Es el anexo informativo §79 de la especificación del protocolo DateKeys v0.16, cuyo texto tiene el SHA-256 c13b598fa688f6cd74b7223f34896c30ff091e05df11dad8a02f1ea6bcbb6fa7. Es el mismo para toda cápsula: no lleva ningún dato de esta. Su licencia es CC BY-ND 4.0, Atribución-SinDerivadas 4.0 Internacional (https://creativecommons.org/licenses/by-nd/4.0/deed.es): se puede copiar y compartir sin cambios, citando su origen.
 
 ## 79. Anexo informativo: recuperación sin software DateKeys
 
@@ -13,11 +13,12 @@ Hace falta:
 - el `.dkc`;
 - el release de su ronda, de cualquier fuente: un relay de drand, un archivo de releases, un servicio de caché (§50) o cualquier copia. No hace falta confiar en quien lo da: se verifica con la clave pública de 79.1 (79.3);
 - en `time_and_key`, una credencial: la `.dkk`, la identity `age` de un recipient o las palabras de una llave de palabras (§38.1);
-- una librería de BLS12-381 con pairing y con el hash a G1 de RFC 9380, SHA-256, HMAC-SHA256, HKDF-SHA256 (RFC 5869), ChaCha20-Poly1305 (RFC 8439), un decodificador de CBOR y la herramienta `age` (§77) o una librería compatible.
+- una librería de BLS12-381 con pairing y con el hash a G1 de RFC 9380, SHA-256, HMAC-SHA256, HKDF-SHA256 (RFC 5869), ChaCha20-Poly1305 (RFC 8439), un decodificador de CBOR y la herramienta `age` (§77) o una librería compatible;
+- con una llave de palabras, PBKDF2-HMAC-SHA256 (RFC 8018) y, si las palabras llevan otras letras que las de 79.7, `UnicodeData.txt` de Unicode 18.0.0.
 
 No sirven las herramientas de drand: `tle` pide el release a la red y no acepta uno dado, y `age` no acepta una file key, que es lo que da el stanza tlock (79.4). Por eso este anexo describe esos dos pasos enteros (79.4 y 79.5).
 
-La implementación de referencia lo sigue en `scripts/recovery`, un programa que no importa ningún paquete de DateKeys, tlock ni drand: solo la librería estándar de Go, `golang.org/x/crypto`, `filippo.io/age` y la librería BLS12-381 `drand/kyber-bls12381`. `scripts/recovery_check.sh` abre con él una cápsula `time_only` y otra `time_and_key` de los fixtures oficiales.
+La implementación de referencia lo sigue en `scripts/recovery`, un programa que no importa ningún paquete de DateKeys, tlock ni drand: solo la librería estándar de Go, `golang.org/x/crypto`, `filippo.io/age` y la librería BLS12-381 `drand/kyber-bls12381`, con las interfaces de `drand/kyber`. `scripts/recovery_check.sh` abre con él una cápsula `time_only`, otra `time_and_key` con su `.dkk`, otra con una llave de palabras y otra cuyo `PAYLOAD_AGE` acaba en un bloque completo, de los fixtures oficiales. Las palabras se le dan en un fichero de texto, y `UnicodeData.txt`, si hace falta, en otro.
 
 ### 79.1 Parámetros de Quicknet
 
@@ -108,7 +109,7 @@ Es la especificación `age` v1 de C2SP (§77), resumida. Un fichero `age` es una
 ```text
 age-encryption.org/v1
 -> <tipo> <argumentos…>
-<cuerpo del stanza en Base64 sin relleno, líneas de 64 caracteres, la última más corta>
+<cuerpo del stanza en Base64 sin relleno, líneas de 64 caracteres, la última más corta, quizá vacía>
 --- <MAC en Base64 sin relleno, 43 caracteres>
 <payload>
 ```
@@ -117,20 +118,48 @@ Con la file key FK, de 16 bytes:
 
 1. La cabecera: clave_mac = HKDF-SHA256(ikm = FK, salt = vacío, info = `header`), 32 bytes. El MAC es HMAC-SHA256(clave_mac, la cabecera desde `age-encryption.org/v1` hasta `---` inclusive, sin el espacio que lo sigue). Si no coincide con el de la línea `---`, la file key o la cabecera son otras.
 2. El payload empieza tras el salto de línea del MAC por un nonce de 16 bytes. clave = HKDF-SHA256(ikm = FK, salt = nonce, info = `payload`), 32 bytes.
-3. Lo demás son bloques de ChaCha20-Poly1305 de 65 536 bytes de texto, 65 552 cifrados, el último más corto. El nonce de 12 bytes del bloque n, desde 0, es n en 11 bytes big-endian seguido de 0x01 en el último bloque y de 0x00 en los demás. No hay datos asociados. El último bloque solo puede estar vacío si es el único, y nada sigue al último bloque.
+3. Lo demás son bloques de ChaCha20-Poly1305 de 65 536 bytes de texto, 65 552 cifrados; el último puede ser más corto, o estar completo: un plaintext de 65 536 bytes es un solo bloque, completo y marcado como último. El nonce de 12 bytes del bloque n, desde 0, es n en 11 bytes big-endian seguido de 0x01 en el último bloque y de 0x00 en los demás. No hay datos asociados. El último bloque solo puede estar vacío si es el único, y nada sigue al último bloque.
 
 ### 79.6 Las capas siguientes
 
 El plaintext de `SEALED_CONTROL` es:
 
 - en `time_only`, `CONTROL_CBOR`;
-- en `time_and_key`, otro fichero `age`, `INNER_ACCESS_AGE`, con stanzas X25519, uno por credencial y señuelos hasta 16 en los formatos 2 y 3. Se abre con `age -d -i clave.txt`, con la identity de la credencial en `clave.txt`. La de una `.dkk` es su `access_material`. La `.dkk` empieza por 12 bytes, `DKK1`, `01`, `00`, `00 00` y `BODY_LEN` en 4 bytes big-endian (§40), y le sigue un mapa CBOR cuya clave 5 es ese `access_material`, 32 bytes (§41), y cuya clave 3 es el `capsule_id` de su cápsula. Una llave de palabras da la identity con §38.1.
+- en `time_and_key`, otro fichero `age`, `INNER_ACCESS_AGE`, con stanzas X25519, uno por credencial y señuelos hasta 16 en los formatos 2 y 3. Se abre con `age -d -i clave.txt`, con la identity de la credencial en `clave.txt`. La de una `.dkk` es su `access_material`. La `.dkk` empieza por 12 bytes, `DKK1`, `01`, `00`, `00 00` y `BODY_LEN` en 4 bytes big-endian (§40), y le sigue un mapa CBOR cuya clave 5 es ese `access_material`, 32 bytes (§41), y cuya clave 3 es el `capsule_id` de su cápsula. Una llave de palabras da la identity con 79.7.
 
 `CONTROL_CBOR` es un mapa CBOR (§31). Su clave 3 es `I_PAYLOAD`, otra identity X25519 de 32 bytes, y en los formatos 2 y 3 su clave 6 es L, una cadena de 8 bytes con un entero big-endian, no un entero CBOR. Con `I_PAYLOAD`, `age -d -i payload.txt` abre `PAYLOAD_AGE`.
 
 Una identity X25519 de 32 bytes se escribe para `age` en Bech32 (BIP 173, §77), no Bech32m: el prefijo `age-secret-key-`, los 32 bytes reagrupados de 8 en 5 bits con ceros al final, que dan 52 caracteres, y la suma de comprobación de BIP 173, calculada con el prefijo en minúsculas. Después, todo en mayúsculas: `AGE-SECRET-KEY-1…`.
 
-### 79.7 El contenido
+### 79.7 La llave de palabras
+
+Unas palabras dan la identity X25519 de una credencial (§38.1):
+
+```text
+P  = las palabras normalizadas, en UTF-8, separadas por un espacio (0x20)
+S  = "DateKeys llave de palabras v2|" || chain_hash || "|" || ronda || "|" || capsule_id
+id = PBKDF2-HMAC-SHA256(P, S, 600000 iteraciones, 32 bytes)      ; RFC 8018
+```
+
+En S, `chain_hash` es el de 79.1 y `capsule_id` el de 79.2, en hexadecimal en minúsculas, y la ronda, la de la DateKey en decimal, sin ceros a la izquierda. `id` es la identity, que se escribe para `age` como dice 79.6.
+
+**Normalización sin tablas.** Si el texto solo lleva caracteres ASCII imprimibles (U+0021 a U+007E), los espacios U+0009 a U+000D y U+0020, las letras á, é, í, ó, ú, ü y ñ y sus mayúsculas, y marcas de U+0300 a U+036F, que es lo que da cualquier palabra de las listas de DateKeys, las palabras normalizadas salen así:
+
+1. se quitan las marcas de U+0300 a U+036F;
+2. á y Á pasan a a; é y É, a e; í e Í, a i; ó y Ó, a o; ú, ü, Ú y Ü, a u; ñ y Ñ, a n;
+3. A a Z pasan a a a z;
+4. se parte el texto por los espacios, sin palabras vacías.
+
+El resto se queda: la puntuación y las cifras cuentan, y «perro,» no es «perro».
+
+**Normalización completa.** Para cualquier otro texto, en este orden: la NFD de UAX #15, con la descomposición canónica de cada punto de código (el campo 5 de `UnicodeData.txt`, sin las que llevan una etiqueta entre `<` y `>`, aplicada hasta el final), la de las sílabas Hangul, que se calcula, y la reordenación canónica por la clase de combinación (campo 3); se quitan los puntos de código de U+0300 a U+036F; cada punto de código pasa a su minúscula simple (campo 13), si la tiene; y se parte por los espacios U+0009 a U+000D, U+0020, U+0085, U+00A0, U+1680, U+2000 a U+200A, U+2028, U+2029, U+202F, U+205F y U+3000, sin palabras vacías. Sirve cualquier copia de `UnicodeData.txt` de Unicode 18.0.0 cuyo SHA-256 sea `0736451de439ae7baf1425136617da495e09ee5afbe6e394374db7009ea08950`; unicode.org la publica en `https://www.unicode.org/Public/18.0.0/ucd/UnicodeData.txt`. Otra versión de Unicode puede dar otras palabras: una que asigne un punto de código nuevo, o que cambie una descomposición o una minúscula.
+
+Vectores, con el chain hash de Quicknet, la ronda 1000 y `capsule_id` = `000102030405060708090a0b0c0d0e0f`:
+
+- «perro luna casa verde tren mar» da `id` = `fceec4d8ca8de86c85a1f26ed49f82a2b38431bd0ce36db995ae7dfd49b96e41`;
+- el texto «Ñandú», dos espacios, «PINGÜINO», un tabulador (U+0009) y «camión árbol Éter ola» da «nandu pinguino camion arbol eter ola» e `id` = `273295d29370126a3be50b743132718d3cd9137fb3bb4cb20aa23163d2e19bb7`, lo mismo que ese texto con las tildes, la diéresis y la tilde de la eñe escritas como marcas sueltas detrás de su letra (U+0301, U+0308 y U+0303).
+
+### 79.8 El contenido
 
 El plaintext de `PAYLOAD_AGE` es:
 
@@ -153,6 +182,6 @@ La clave 5 del head es la lista de ficheros (§29.4). Cada uno es un mapa:
 
 Sus bytes van de start a end, sin incluir end, contados desde el origen. Las claves 3 y 4 del head son el comentario y el autor declarado: textos del creador que no prueban nada (§29.7). Una ruta que saldría de la carpeta de destino no se escribe.
 
-### 79.8 Lo que el anexo no comprueba
+### 79.9 Lo que el anexo no comprueba
 
 Este anexo comprueba lo que decide que el resultado es el correcto: la firma del release, r·G2 == U, los MAC de cada fichero `age` y el SHA-256 de cada fichero. No comprueba, entre otras cosas, la codificación canónica de cada objeto, `header_binding` (§26), los 16 stanzas de `INNER_ACCESS_AGE` (§39), los ceros del relleno (§29.1) ni las reglas de las rutas (§29.5). Una cápsula que el lector de §63 rechazaría puede abrirse siguiendo este anexo; su contenido es el que sellaron las MAC de `age`, pero no tiene la garantía de un lector conforme.
diff --git a/scripts/check-build.mjs b/scripts/check-build.mjs
index 3b99b9f..f37bce6 100644
--- a/scripts/check-build.mjs
+++ b/scripts/check-build.mjs
@@ -17,9 +17,9 @@
 // - a page has an inline style, an event handler attribute or a URL to
 //   another origin, or a stylesheet imports or references one;
 // - the official .dkc fixtures are not shipped byte for byte, or a secret of
-//   the fixtures (.dkk files, plaintexts, identities, payload identities,
-//   access material, CONTROL_CBOR, and the heads, salts, comments and paths
-//   of format 3) is anywhere in the build;
+//   the fixtures (.dkk files, plaintexts, identities, the text of a key of
+//   words, payload identities, access material, CONTROL_CBOR, and the heads,
+//   salts, comments and paths of format 3) is anywhere in the build;
 // - a page loads the Unicode tables of the paths of format 3 with its first
 //   load, not on demand;
 // - a page loads the locator of datekeys.capsule (locator.ts, envelope.ts,
@@ -236,6 +236,8 @@ for (const name of fixtureFiles) {
   if (name.endsWith('.json')) {
     const record = JSON.parse(bytes.toString('utf8'));
     for (const id of record.identities ?? []) addSecret(`${name} identities`, id);
+    // The text of the words of a key of words (spec v0.16, annex 79.7), a credential.
+    addSecret(`${name} words_text`, record.words_text);
     addSecret(`${name} payload_identity`, record.payload_identity);
     addSecret(`${name} access_material`, record.access_material);
     addSecret(`${name} control_cbor`, record.control_cbor);
diff --git a/scripts/signing-go-vectors_test.go b/scripts/signing-go-vectors_test.go
index b6c1acf..d05c638 100644
--- a/scripts/signing-go-vectors_test.go
+++ b/scripts/signing-go-vectors_test.go
@@ -27,11 +27,12 @@
 // lines.
 //
 // It imports internal packages, so it runs as a test in an export of
-// datekeys-go at the tag spec-v0.12 made with git archive, which it does not
-// change, never in the repository itself. From the root of this repository:
+// datekeys-go made with git archive, which it does not change, never in the
+// repository itself: at the tag spec-v0.12 when it was written, and at
+// 4f78854, the draft v0.16, since. From the root of this repository:
 //
 //	node scripts/signing-ts-samples.mjs > /tmp/ts-signing.json
-//	commit=$(git -C ../datekeys-go rev-parse 'spec-v0.12^{commit}')
+//	commit=$(git -C ../datekeys-go rev-parse '4f78854^{commit}')
 //	tmp=$(mktemp -d)
 //	git -C ../datekeys-go archive "$commit" | tar -x -C "$tmp"
 //	mkdir "$tmp/signingvectors"
@@ -42,7 +43,10 @@
 //	rm -rf "$tmp"
 //
 // The cases are the same on every run with Go 1.26.8; the samples are
-// random, and frozen with what Go gives for them.
+// random, and frozen with what Go gives for them. For v0.16 the frozen
+// samples were read again, with their "ts" as this library reads them now,
+// and the tokens of the sealer, without accuracy, give S5 (spec v0.16,
+// §29.11).
 package signingvectors
 
 import (
diff --git a/src/lib/dkc/cms.ts b/src/lib/dkc/cms.ts
index 0c20533..b05244b 100644
--- a/src/lib/dkc/cms.ts
+++ b/src/lib/dkc/cms.ts
@@ -109,6 +109,9 @@ const OID = {
   sigTimeStamp: oid('1.2.840.113549.1.9.16.2.14'),
   tstInfo: oid('1.2.840.113549.1.9.16.1.4'),
   riOCSP: oid('1.3.6.1.5.5.7.16.2'),
+  // The best practices time-stamp policy of ETSI EN 319 421, whose tokens
+  // carry accuracy (spec v0.16, §29.11).
+  btsp: oid('0.4.0.2023.1.1'),
   sha256: oid('2.16.840.1.101.3.4.2.1'),
   sha384: oid('2.16.840.1.101.3.4.2.2'),
   sha512: oid('2.16.840.1.101.3.4.2.3'),
@@ -950,9 +953,16 @@ export function checkSigner(s: SignerInfo, message: Uint8Array): CheckResult {
 
 /** A time-stamp token of RFC 3161 read with the profile of spec §29.11. */
 export interface Token {
-  /** t, and the precision of the token, zero when it has none. */
+  /**
+   * t, and the precision of the token, zero in the fields it does not carry.
+   * hasAccuracy is whether it carries the field at all: without it, the token
+   * does not say its precision (spec v0.16, §29.11).
+   */
   readonly genTime: Instant;
   readonly accuracy: Instant;
+  readonly hasAccuracy: boolean;
+  /** The content of the object identifier of its policy, in hexadecimal, as this module compares them. */
+  readonly policy: string;
   /** The algorithm of the messageImprint, and the hash. */
   readonly imprintAlg: AlgID;
   readonly imprint: Uint8Array;
@@ -974,13 +984,13 @@ export function parseToken(b: Uint8Array): Token {
   const imprintAlg = parseAlgID(info.imprintAlg);
   const signer = sd.signers[0]!;
   if (hashOfAlg(imprintAlg) === undefined || params(signer) === undefined || publicKey(signer.cert) === undefined) throw new CmsAlgorithmError();
-  return { genTime: info.genTime, accuracy: info.accuracy, imprintAlg, imprint: info.hash, tsa: signer.cert, data: sd };
+  return { genTime: info.genTime, accuracy: info.accuracy, hasAccuracy: info.hasAccuracy, policy: info.policy, imprintAlg, imprint: info.hash, tsa: signer.cert, data: sd };
 }
 
 // The TSTInfo of RFC 3161 3.2.1 in DER: the fields in order, each once, and
 // nothing after the last. It returns the messageImprint algorithm, as the DER
 // of its AlgorithmIdentifier, and the hash.
-function parseTSTInfo(b: Uint8Array): { genTime: Instant; accuracy: Instant; imprintAlg: Uint8Array; hash: Uint8Array } {
+function parseTSTInfo(b: Uint8Array): { genTime: Instant; accuracy: Instant; hasAccuracy: boolean; policy: string; imprintAlg: Uint8Array; hash: Uint8Array } {
   const bad = (what: string): never => {
     throw form(`the TSTInfo: ${what}`);
   };
@@ -999,9 +1009,11 @@ function parseTSTInfo(b: Uint8Array): { genTime: Instant; accuracy: Instant; imp
   // The check of the DER read every time of the TSTInfo, genTime among them.
   const genTime = parseTime(f[4]!).time;
   let accuracy: Instant = { seconds: 0, nanos: 0 };
+  let hasAccuracy = false;
   let rest = f.slice(5);
   if (rest.length > 0 && rest[0]![0] === 0x30) {
     accuracy = parseAccuracy(rest[0]!, bad);
+    hasAccuracy = true;
     rest = rest.slice(1);
   }
   if (rest.length > 0 && rest[0]![0] === 0x01) {
@@ -1013,7 +1025,7 @@ function parseTSTInfo(b: Uint8Array): { genTime: Instant; accuracy: Instant; imp
   if (rest.length > 0 && rest[0]![0] === 0xa0) rest = rest.slice(1); // tsa
   if (rest.length > 0 && rest[0]![0] === 0xa1) rest = rest.slice(1); // extensions
   if (rest.length !== 0) bad('a field out of its place, or one that does not exist');
-  return { genTime, accuracy, imprintAlg: mi[0]!, hash: derContent(mi[1]!) };
+  return { genTime, accuracy, hasAccuracy, policy: oidOf(f[1]!)!, imprintAlg: mi[0]!, hash: derContent(mi[1]!) };
 }
 
 // Accuracy: seconds from 0 to 2^31 - 1, and millis and micros from 1 to 999,
@@ -1056,6 +1068,15 @@ export function tokenImprintIsSHA256(t: Token): boolean {
   return t.imprintAlg.oid === OID.sha256;
 }
 
+/**
+ * Whether the policy of the token is the best practices time-stamp policy of
+ * ETSI EN 319 421 (0.4.0.2023.1.1), compared by the bytes of its DER, which
+ * requires accuracy in every token (spec v0.16, §29.11).
+ */
+export function tokenIsBTSP(t: Token): boolean {
+  return t.policy === OID.btsp;
+}
+
 /**
  * Verifies the token over `subject`, the bytes that it seals: the
  * message-digest is the hash of the TSTInfo, the signature of the TSA
diff --git a/src/lib/dkc/encrypt.signing.test.ts b/src/lib/dkc/encrypt.signing.test.ts
index 7a5698e..2142bb7 100644
--- a/src/lib/dkc/encrypt.signing.test.ts
+++ b/src/lib/dkc/encrypt.signing.test.ts
@@ -325,12 +325,13 @@ describe('the hooks', () => {
       files,
       options({
         authorKey: { publicKey: () => key.publicKey(), sign: (m) => ((message = m), key.sign(m)) },
-        sealer: { seal: (s) => ((subject = s), b.token(s, signedAt, {}, tsa)) },
+        sealer: { seal: (s) => ((subject = s), b.token(s, signedAt, { accuracy: b.accuracyOf(1) }, tsa)) },
       }),
       { payloadIdentity: payloadId },
     );
     const o = await openedOf(w.dkc!);
     expect([o.verdicts, o.author_key, o.area_len]).toEqual([['F4', 'S4'], hx(key.publicKey()), AREA_LEN]);
+    expect([w.security?.signature, w.security?.seal, w.security?.detail?.sealReason]).toEqual(['F4', 'S4', undefined]);
     expect((await openedOf(w.dkc!, { [key.publicString()]: 'mía' })).lines![0]).toBe('Firmado con la clave que guardaste como mía.');
     // The control from the capsule: its binding, I_PAYLOAD and L, whatever L is.
     const p = split(w.dkc!);
@@ -345,6 +346,24 @@ describe('the hooks', () => {
     expect(hx(subject)).not.toBe(hx(sealSubject(cc, headDigest(body.head), undefined)));
   });
 
+  // Spec v0.16, §62.1 rule 19: a seal without accuracy is written, and the verdicts of the area that encryptFiles wrote
+  // say that it proves nothing before the opening date, so that the writer warns of it; the line of a signer of F6
+  // whose seal carries none says so too. encrypt, which writes format 2, has no area.
+  it('return the verdicts of the area they wrote, so that the writer warns of a seal without accuracy', async () => {
+    const tsa = await b.newECDSA('TSA', 'P-256', from, to);
+    const ana = await b.newECDSA('Ana', 'P-256', from, to);
+    const sealed = await encryptFiles(files, options({ sealer: { seal: (s) => b.token(s, signedAt, {}, tsa) } }));
+    expect([sealed.security?.signature, sealed.security?.seal, sealed.security?.detail?.sealReason]).toEqual(['F0', 'S5', 'no accuracy']);
+    expect((await openedOf(sealed.dkc!)).lines).toEqual(['Sin firma de autor.', 'No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión.']);
+    const btsp = await encryptFiles(files, options({ sealer: { seal: (s) => b.token(s, signedAt, { policy: b.BTSP_POLICY }, tsa) } }));
+    expect(btsp.security?.detail?.sealReason).toBe('no accuracy, BTSP');
+    const hash = await certHash(ana);
+    const cms = await encryptFiles(files, options({ cmsSigner: { signers: () => [hash], sign: (m) => b.signature(m, { token: (sig) => b.token(sig, signedAt, {}, tsa) }, ana) } }));
+    expect([cms.security?.signature, cms.security?.seal, cms.security?.detail?.signers.map((s) => [s.before, s.reason])]).toEqual(['F6', 'S0', [[false, 'no accuracy']]]);
+    expect((await encryptFiles(files, options())).security).toEqual({ signature: 'F0', seal: 'S0' });
+    expect((await encryptVectors(new Uint8Array(3), options())).security).toBeUndefined();
+  });
+
   it('take a CMS signature with certificates, F6, and widen the area only when it is asked and needed', async () => {
     const tsa = await b.newECDSA('TSA', 'P-256', from, to);
     const ana = await b.newECDSA('Ana', 'P-256', from, to);
diff --git a/src/lib/dkc/fixtures.test.ts b/src/lib/dkc/fixtures.test.ts
index 43be0e8..74608b5 100644
--- a/src/lib/dkc/fixtures.test.ts
+++ b/src/lib/dkc/fixtures.test.ts
@@ -91,6 +91,7 @@ interface SignerResult {
   result: string;
   seal_time?: string;
   before_round_time: boolean;
+  seal_reason?: string;
 }
 
 // A signer as the record of the reference writes it.
@@ -100,6 +101,7 @@ const resultOf = (s: SignerLine): SignerResult => ({
   result: s.result,
   ...(s.sealTime === undefined ? {} : { seal_time: formatRFC3339(s.sealTime) }),
   before_round_time: s.before,
+  ...(s.reason === undefined ? {} : { seal_reason: s.reason }),
 });
 
 interface DkkFixture {
diff --git a/src/lib/dkc/open.test.ts b/src/lib/dkc/open.test.ts
index 9845e3f..b39a242 100644
--- a/src/lib/dkc/open.test.ts
+++ b/src/lib/dkc/open.test.ts
@@ -29,6 +29,7 @@ import { frame, split } from './testing/capsule.ts';
 import { kinds } from './testing/verdicts.ts';
 import { h, hx, listTestdata, readBytes, readJSON } from './testing/testdata.ts';
 import { applyEdits, edits } from './testing/vectors.ts';
+import { normalizeWords, wordKey } from './wordkey.ts';
 import { parseX25519Identity, unwrapX25519, x25519PublicKey } from './x25519.ts';
 
 interface Sidecar {
@@ -47,6 +48,9 @@ interface Sidecar {
   access_key_stanza?: number;
   identities?: string[];
   identity_stanzas?: number[];
+  capsule_id: string;
+  // The text of the words of a key of words, as the person types it (spec v0.16, annex 79.7).
+  words_text?: string;
   // Format 3: the plaintext file is BODY.
   area_len?: number;
   content_offset?: number;
@@ -780,3 +784,37 @@ describe('the identities of open', () => {
     );
   });
 });
+
+// Spec v0.16, annex 79.7 and §38.1: format3_time_and_key_words opens with the
+// identity that its words give, the text of the second vector of the annex
+// with capitals, accents, two spaces and a tab, as TestFixtureWords of Go.
+describe('format3_time_and_key_words', () => {
+  it('opens with the identity that the words of its record give', async () => {
+    const f = fixture('format3_time_and_key_words');
+    expect([f.side.words_text, f.side.identities?.length, f.side.access_key_file]).toEqual(['Ñandú  PINGÜINO	camión árbol Éter ola', 1, undefined]);
+    const words = await normalizeWords(f.side.words_text!);
+    expect(words.join(' ')).toBe('nandu pinguino camion arbol eter ola');
+    const id = await wordKey(words, chainHashHex(quicknet()), f.release.round, h(f.side.capsule_id));
+    expect(hx(id)).toBe(hx(parseX25519Identity(f.side.identities![0]!)));
+    const sink = new MemorySink();
+    const r = await open(f.dkc, options(f, { identities: [id], sink }));
+    expect(r.error).toBeUndefined();
+    expectFiles(f, r, sink);
+    // The same text with its marks apart gives the same words.
+    expect(await normalizeWords(f.side.words_text!.normalize('NFD'))).toEqual(words);
+  });
+});
+
+// Spec v0.16, annex 79.5: the last STREAM chunk of age may be full. In
+// format3_full_chunk, BODY and P measure 65536 bytes, so PAYLOAD_AGE is one
+// full chunk, marked as the last.
+describe('format3_full_chunk', () => {
+  it('opens a PAYLOAD_AGE that ends in a full chunk', async () => {
+    const f = fixture('format3_full_chunk');
+    expect([f.side.payload_length, f.side.padded_length, f.plaintext.length]).toEqual([65536, 65536, 65536]);
+    const sink = new MemorySink();
+    const r = await open(f.dkc, options(f, { sink }));
+    expect(r.error).toBeUndefined();
+    expectFiles(f, r, sink);
+  });
+});
diff --git a/src/lib/dkc/releaseobject.test.ts b/src/lib/dkc/releaseobject.test.ts
index 8cef29f..ae1ba0e 100644
--- a/src/lib/dkc/releaseobject.test.ts
+++ b/src/lib/dkc/releaseobject.test.ts
@@ -1,6 +1,8 @@
 // Tests of releaseobject.ts, the release object, drand's JSON and the local
-// archive of spec v0.15 (§47.1, §50): what vectors/release.json does not
-// reach, with the texts of provider/release.go and provider/archive.go.
+// archive of spec v0.15 (§47.1, §50), drand's JSON read strictly since v0.16:
+// what vectors/release.json does not reach, with the texts of
+// provider/release.go and provider/archive.go, and the cases of
+// provider/drandjson_test.go.
 
 import { describe, expect, it } from 'vitest';
 import { concatBytes, toHex } from './bytes.ts';
@@ -12,10 +14,13 @@ import {
   encodeRelease,
   isDrandJSON,
   isReleaseArchive,
+  jsonRound,
   newReleaseObject,
+  parseDrandJSON,
   parseRelease,
   type Release,
   ReleaseArchive,
+  strictJSON,
   verifyRelease,
 } from './release.ts';
 import { expectCode, h, readJSON } from './testing/testdata.ts';
@@ -25,6 +30,8 @@ const sig1000 = signature('time_only');
 const sig1001 = signature('empty_payload');
 const rel = (round: number, sig: Uint8Array): Release => ({ round, signature: sig });
 const S = toHex(sig1000);
+// The randomness of round 1000, SHA-256 of its signature, as drand's API gives it.
+const R = 'fe290beca10872ef2fb164d2aa4442de4566183ec51c56ff3cd603d930e54fdd';
 const enc = new TextEncoder();
 const MALFORMED = 'provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID';
 
@@ -62,35 +69,155 @@ describe("parseRelease of drand's JSON", () => {
     expect(isDrandJSON(enc.encode('{'))).toBe(false);
   });
 
-  it('reads it as encoding/json reads it into the struct of the reference', async () => {
-    // Keys without case, the last one winning; other members ignored,
-    // nested values included; null unsets round and signature.
-    expect(await parsed(`{"ROUND":1,"Signature":"${S}","x":{"a":[1,"}",{"b":null}]},"y":[]}`)).toBe('ok 1 48');
-    expect(await parsed(`{"round":1,"round":2,"signature":"${S}"}`)).toBe('ok 2 48');
-    expect(await parsed(`{"round":1,"Round":null,"signature":"${S}"}`)).toBe(MALFORMED);
-    expect(await parsed(`{"round":1,"signature":"${S}","signature":null}`)).toBe(MALFORMED);
-    expect(await parsed(`{"round":1,"ſignature":"${S}"}`)).toBe('ok 1 48');
-    expect(await parsed(`{"round":1,"signature":"\\u0062${S.slice(1)}","randomness":null}`)).toBe('ok 1 48');
-    expect(await parsed(`{"round":1,"signature":"","randomness":""}`)).toBe('ok 1 0');
-    expect(await parsed(`{ "round" : 1 , "e" : "\\"}" , "signature" : "${S}" }`)).toBe('ok 1 48');
+  // Spec v0.16, §47.1: names compared exactly once their escapes are decoded, no name twice in any object, round a
+  // number of 1 to 2^53 - 1 without sign, fraction or exponent, and signature and randomness strings. release.json has
+  // the cases of Go; these are those whose escapes its generator wrote as plain text, and a few more.
+  it('reads it strictly', async () => {
+    expect(await parsed(`{"\\u0072ound":1,"signature":"${S}"}`)).toBe('ok 1 48');
+    expect(await parsed(`{"round":1,"\\u0072ound":1,"signature":"${S}"}`)).toBe(MALFORMED);
+    expect(await parsed(`{"round":1,"signature":"${S}","\\u0073ignature":"${S}"}`)).toBe(MALFORMED);
+    expect(await parsed(`{"ROUND":1,"Signature":"${S}"}`)).toBe(MALFORMED);
+    expect(await parsed(`{"round":1,"ſignature":"${S}"}`)).toBe(MALFORMED);
+    expect(await parsed(`{"round":1,"signature":"\\u0062${S.slice(1)}"}`)).toBe('ok 1 48');
+    expect(await parsed(`{"round":1,"signature":"${S.toUpperCase()}","randomness":"${R.toUpperCase()}"}`)).toBe('ok 1 48');
+    expect(await parsed(`{"round":1,"signature":""}`)).toBe('ok 1 0');
+    expect(await parsed(`{ "round" : 1 , "e" : "\\"}" , "signature" : "${S}" , "x":{"a":[1,"}",{"b":null}]},"y":[] }`)).toBe('ok 1 48');
     expect(await parsed('{}')).toBe(MALFORMED);
+    expect(await parsed(`{"signature":"${S}"}`)).toBe(MALFORMED);
+    expect(await parsed('{"round":1}')).toBe(MALFORMED);
     expect(await parsed('{"round":1,"signature":"abc"}')).toBe('provider: drand JSON: signature is not hex: ERR_RELEASE_INVALID');
+    expect(await parsed(`{"round":1,"signature":"${S}","randomness":"${R.slice(2)}"}`)).toBe(
+      'provider: drand JSON: randomness does not match the signature: ERR_RELEASE_INVALID',
+    );
+    // Not UTF-8, as Go's utf8.Valid: a byte that starts nothing, and a surrogate written in UTF-8.
+    for (const bad of [Uint8Array.of(0xff), Uint8Array.of(0xed, 0xa0, 0x80)]) {
+      const b = concatBytes(enc.encode(`{"round":1,"signature":"${S}","note":"`), bad, enc.encode('"}'));
+      await expect(parseDrandJSON(b)).rejects.toThrow(MALFORMED);
+    }
+    // A byte order mark is not a space of JSON.
+    await expect(parseDrandJSON(enc.encode(`{"round":1,"signature":"${S}"}`))).rejects.toThrow(MALFORMED);
   });
 
-  it('fails a value of another type for a field it reads, and a round that is not a uint64', async () => {
-    for (const r of ['-1', '1.0', '1e3', '18446744073709551616', '"1"', 'true', '{}', '[]']) {
+  it('fails a value of another type for a field it reads, and a round that is not one', async () => {
+    for (const r of ['-1', '0', '1.0', '1e3', '01', '9007199254740992', '18446744073709551616', '"1"', 'true', 'null', '{}', '[]']) {
       expect(await parsed(`{"round":${r},"signature":"${S}"}`), r).toBe(MALFORMED);
     }
     expect(await parsed('{"round":1,"signature":1}')).toBe(MALFORMED);
+    expect(await parsed('{"round":1,"signature":null}')).toBe(MALFORMED);
     expect(await parsed(`{"round":1,"signature":"${S}","randomness":1}`)).toBe(MALFORMED);
+    expect(await parsed(`{"round":1,"signature":"${S}","randomness":null}`)).toBe(MALFORMED);
     expect(await parsed(`{"round":1,"signature":"${S}"} x`)).toBe(MALFORMED);
   });
 
-  it('keeps a round above 2^53-1 exact, for the text of ERR_ROUND_MISMATCH', async () => {
-    const big = await parseRelease(enc.encode(`{"round":18446744073709551615,"signature":"${S}"}`));
-    expect(big.round).toBe(18446744073709551615n);
-    expectCode(() => verifyRelease(quicknet(), 1000, big), 'ERR_ROUND_MISMATCH', /^provider: release for round 18446744073709551615, expected 1000: /);
-    expect((await parseRelease(enc.encode(`{"round":9007199254740991,"signature":"${S}"}`))).round).toBe(9007199254740991);
+  it('reads a round of 2^53 - 1 as a number, for the text of ERR_ROUND_MISMATCH', async () => {
+    const big = await parseRelease(enc.encode(`{"round":9007199254740991,"signature":"${S}"}`));
+    expect(big.round).toBe(9007199254740991);
+    expectCode(() => verifyRelease(quicknet(), 1000, big), 'ERR_ROUND_MISMATCH', /^provider: release for round 9007199254740991, expected 1000: /);
+  });
+});
+
+// Spec v0.16, §47.1: the strict reading of drand's JSON, at the edges of the grammar of RFC 8259 that release.json does
+// not reach, as provider.TestStrictJSON of the reference, with its escapes written as escapes.
+describe('strictJSON', () => {
+  it.each([
+    ['{}', true],
+    [' {"a":1} ', true],
+    ['\t{"a":1}\r\n', true],
+    ['{"a":[]}', true],
+    ['{"a":[1,2,[3,{}]]}', true],
+    ['{"a":true,"b":false,"c":null}', true],
+    ['{"a":-0,"b":0.5,"c":1E+2,"d":1e-2,"e":-12.25e3}', true],
+    ['{"a":"\\"\\\\\\/\\b\\f\\n\\r\\té"}', true],
+    ['{"\\u00e9":1,"é":2}', false], // one name, escaped and not
+    ['{"\\u00E9":1,"\\u00e9":2}', false],
+    ['{"a":1,"a":2}', false],
+    ['{"a":{"b":1},"c":{"b":2}}', true], // the same name in two objects
+    ['{"a":[{"b":1,"b":1}]}', false],
+    ['{"a":{"b":1,"b":1}}', false],
+    ['{"a":01}', false],
+    ['{"a":1.}', false],
+    ['{"a":.5}', false],
+    ['{"a":1e}', false],
+    ['{"a":1e+}', false],
+    ['{"a":+1}', false],
+    ['{"a":-}', false],
+    ['{"a":tru}', false],
+    ['{"a":fals}', false],
+    ['{"a":nul}', false],
+    ['{"a":x}', false],
+    ['{"a":"\\x"}', false],
+    ['{"a":"\\u12"}', false],
+    ['{"a":"\\u12g4"}', false],
+    ['{"a":"\\ud800"}', false],
+    ['{"a":"\\ud800A"}', false],
+    ['{"a":"\\ud800x"}', false],
+    ['{"a":"\\ud800\\u0041"}', false],
+    ['{"a":"\\ud800\\ud800"}', false],
+    ['{"a":"\\ud800\\ue000"}', false],
+    ['{"a":"\\ud800\\u12"}', false],
+    ['{"a":"\\ue000\\u0041"}', true],
+    ['{"a":"\\udfff\\ud800"}', false],
+    ['{"a":"\\ud83d\\ude00"}', true],
+    ['{"a":"\\uD83D\\uDE00"}', true],
+    ['{"a":"😀"}', true],
+    ['{"a":"\u0001"}', false],
+    ['{"a":"a\tb"}', false],
+    ['{"a":"\\', false],
+    ['{"a":"b', false],
+    ['{"a":1,}', false],
+    ['{,"a":1}', false],
+    ['{"a" 1}', false],
+    ['{"a":1 "b":2}', false],
+    ['{a:1}', false],
+    ['{"a":[1,]}', false],
+    ['{"a":[1 2]}', false],
+    ['{"a":[1', false],
+    ['{"a":"b"', false],
+    ['{"a":', false],
+    ['{"a"', false],
+    ['{', false],
+    ['{"a":1}x', false],
+    ['[]', false],
+    ['"a"', false],
+    ['', false],
+    ['{"a":1}\v', false], // not a space of JSON
+    ['{"a":1} ', false],
+  ])('%j: %s', (input, ok) => {
+    expect(strictJSON(enc.encode(input)) !== undefined).toBe(ok);
+  });
+
+  it('gives the members of the outer object, in their order, with their names and strings decoded', () => {
+    const m = strictJSON(enc.encode('{"round":1000,"no\\u0074e":"a\\ud83d\\ude00","n":-1.5,"o":{"p":[]},"t":true}'));
+    expect(m).toEqual([
+      { name: 'round', kind: '0', raw: '1000', str: '' },
+      { name: 'note', kind: '"', raw: '"a\\ud83d\\ude00"', str: 'a\u{1f600}' },
+      { name: 'n', kind: '0', raw: '-1.5', str: '' },
+      { name: 'o', kind: '{', raw: '{"p":[]}', str: '' },
+      { name: 't', kind: 't', raw: 'true', str: '' },
+    ]);
+    expect(strictJSON(Uint8Array.of(0x7b, 0x22, 0x61, 0x22, 0x3a, 0x22, 0xff, 0x22, 0x7d))).toBeUndefined();
+  });
+});
+
+describe('jsonRound', () => {
+  it.each([
+    ['1', 1],
+    ['1000', 1000],
+    ['9007199254740991', 9007199254740991],
+    ['0', undefined],
+    ['9007199254740992', undefined],
+    ['9999999999999999', undefined],
+    ['99999999999999999', undefined],
+    ['-1', undefined],
+    ['1.0', undefined],
+    ['1e3', undefined],
+    ['01', undefined],
+  ])('%s', (raw, want) => {
+    expect(jsonRound({ name: 'round', kind: '0', raw, str: '' })).toBe(want);
+  });
+
+  it('is not a string', () => {
+    expect(jsonRound({ name: 'round', kind: '"', raw: '"1"', str: '1' })).toBeUndefined();
   });
 });
 
diff --git a/src/lib/dkc/releaseobject.ts b/src/lib/dkc/releaseobject.ts
index e01d4d7..9898880 100644
--- a/src/lib/dkc/releaseobject.ts
+++ b/src/lib/dkc/releaseobject.ts
@@ -1,8 +1,9 @@
-// The release object of spec v0.15, §47.1, as provider/release.go and
-// provider/archive.go of the Go reference: the release of a round as data
-// that is kept: an entry of a release cache or archive and the answer of a release cache
-// or of the Release API; drand's JSON, which a reader accepts too as the
-// input of the caller; the sources of a release in the caller's hand
+// The release object of spec v0.15, §47.1, as provider/release.go,
+// provider/drandjson.go and provider/archive.go of the Go reference: the
+// release of a round as data that is kept: an entry of a release cache or
+// archive and the answer of a release cache or of the Release API; drand's
+// JSON, which a reader accepts too as the input of the caller, read strictly
+// since spec v0.16; the sources of a release in the caller's hand
 // (provider.Supplier); and a local release archive, the informative format
 // of §50. The texts of the errors are those of the reference.
 //
@@ -10,7 +11,15 @@
 // only decodes, so that the page can read what the person gives before
 // loading the code that opens a capsule.
 
-import { equalBytes, goQuote, sha256, toHex, utf8Length } from "./bytes.ts";
+import {
+  decodeUtf8,
+  equalBytes,
+  fromHex,
+  goQuote,
+  sha256,
+  toHex,
+  utf8Length,
+} from "./bytes.ts";
 import {
   checkSchema,
   Decoder,
@@ -63,16 +72,11 @@ export interface Release {
 }
 
 /**
- * A release as the caller gives it, before step 10. Its round is a bigint
- * only when drand's JSON names a round above 2^53-1, which no DateKey has:
- * step 10 then reports ERR_ROUND_MISMATCH with its exact digits, as Go's
- * uint64 does.
+ * A release as the caller gives it, before step 10. Since spec v0.16 the
+ * round of drand's JSON is at most 2^53 - 1, as that of a release object
+ * (§47.1), so it is a Release.
  */
-export interface ParsedRelease {
-  readonly round: number | bigint;
-  readonly signature: Uint8Array;
-  readonly chainHash?: Uint8Array;
-}
+export type ParsedRelease = Release;
 
 // ---------------------------------------------------------------------------
 // The release object
@@ -211,24 +215,259 @@ export function isDrandJSON(b: Uint8Array): boolean {
 
 /**
  * Reads a release that the caller supplies, as provider.ParseRelease:
- * drand's JSON when isDrandJSON, or else a release object, with
- * decodeRelease. drand's JSON is the answer of a relay, {"round": …,
- * "signature": "…"}, with an optional "randomness" that must be SHA-256 of
- * the signature; it does not name its chain, so the release has no chain
- * hash, and any failure to read it is ERR_RELEASE_INVALID. It is accepted as
- * input, never written.
+ * drand's JSON when isDrandJSON, read strictly by parseDrandJSON, or else a
+ * release object, with decodeRelease. drand's JSON is the answer of a relay,
+ * {"round": …, "signature": "…"}, with an optional "randomness" that must be
+ * SHA-256 of the signature; it does not name its chain, so the release has no
+ * chain hash, and any failure to read it is ERR_RELEASE_INVALID. It is
+ * accepted as input, never written.
  */
 export async function parseRelease(b: Uint8Array): Promise<ParsedRelease> {
   return isDrandJSON(b) ? parseDrandJSON(b) : decodeRelease(b);
 }
 
-// The JSON of a drand relay, read as Go's encoding/json reads it into
-// {Round *uint64; Signature *string; Randomness string}: the members of the
-// object in order, each matched to a field by its name without case, the
-// last one winning; null leaves a field as it was for Randomness and unset
-// for the other two; a value of another type, or a round that is not an
-// integer of 0 to 2^64-1, fails the whole input.
-async function parseDrandJSON(b: Uint8Array): Promise<ParsedRelease> {
+// ---------------------------------------------------------------------------
+// drand's JSON, read strictly
+//
+// The strict reading of drand's JSON (spec v0.16, §47.1), as
+// provider/drandjson.go of the reference: JSON of RFC 8259, in UTF-8, whose
+// value is an object; no object of the JSON repeats a name, and names are
+// compared exactly, code point by code point, once their escapes are
+// decoded, so that "round" is round and Round is another name; and an
+// escape of a surrogate that does not pair with the next one makes the JSON
+// malformed. A common JSON reader keeps the last of two repeated names, or
+// does not tell upper from lower case in them, and two readers would see two
+// rounds in the same input.
+
+/**
+ * A member of the outer object of drand's JSON: its name, decoded; the kind
+ * of its value, its first character ('"', '{', '[', 't', 'f' or 'n'), or '0'
+ * for a number; the text of the value as written; and for a string, the
+ * string decoded.
+ */
+export interface JSONMember {
+  readonly name: string;
+  readonly kind: string;
+  readonly raw: string;
+  readonly str: string;
+}
+
+/**
+ * Reads `b` as a JSON object with the strict rules of spec v0.16, §47.1, and
+ * returns the members of the outer object in their order, or undefined when
+ * `b` breaks one: it is not UTF-8, its value is not an object, an object
+ * repeats a name, or a string escapes a surrogate without its pair.
+ */
+export function strictJSON(b: Uint8Array): JSONMember[] | undefined {
+  const text = decodeUtf8(b);
+  if (text === undefined) return undefined;
+  const r = new JSONReader(text);
+  r.space();
+  if (!r.at("{")) return undefined;
+  const members = r.object(true);
+  r.space();
+  return members !== undefined && r.i === text.length ? members : undefined;
+}
+
+// Reads JSON from the text s at i. The text is decoded UTF-8, so it holds no
+// lone surrogate, and a byte order mark at its start stays, as a character
+// that is not a space of JSON.
+class JSONReader {
+  i = 0;
+  private readonly s: string;
+
+  constructor(s: string) {
+    this.s = s;
+  }
+
+  at(c: string): boolean {
+    return this.s[this.i] === c;
+  }
+
+  // Skips the four spaces of JSON.
+  space(): void {
+    while (this.i < this.s.length && " \t\n\r".includes(this.s[this.i]!))
+      this.i++;
+  }
+
+  // One value of any kind, undefined when it breaks the grammar.
+  value(): Omit<JSONMember, "name"> | undefined {
+    const start = this.i;
+    const c = this.s[this.i];
+    let kind = c;
+    let str = "";
+    let ok = false;
+    if (c === "{") ok = this.object(false) !== undefined;
+    else if (c === "[") ok = this.array();
+    else if (c === '"') {
+      const v = this.string();
+      ok = v !== undefined;
+      str = v ?? "";
+    } else if (c === "t") ok = this.literal("true");
+    else if (c === "f") ok = this.literal("false");
+    else if (c === "n") ok = this.literal("null");
+    else if (c === "-" || (c !== undefined && c >= "0" && c <= "9")) {
+      kind = "0";
+      ok = this.number();
+    }
+    return ok
+      ? { kind: kind!, raw: this.s.slice(start, this.i), str }
+      : undefined;
+  }
+
+  // An object, with no name twice; its members when keep is set.
+  object(keep: boolean): JSONMember[] | undefined {
+    this.i++; // {
+    this.space();
+    const out: JSONMember[] = [];
+    if (this.at("}")) {
+      this.i++;
+      return out;
+    }
+    const seen = new Set<string>();
+    for (;;) {
+      this.space();
+      if (!this.at('"')) return undefined;
+      const name = this.string();
+      if (name === undefined || seen.has(name)) return undefined;
+      seen.add(name);
+      this.space();
+      if (!this.at(":")) return undefined;
+      this.i++;
+      this.space();
+      const m = this.value();
+      if (m === undefined) return undefined;
+      if (keep) out.push({ name, ...m });
+      this.space();
+      if (this.at(",")) this.i++;
+      else if (this.at("}")) {
+        this.i++;
+        return out;
+      } else return undefined;
+    }
+  }
+
+  array(): boolean {
+    this.i++; // [
+    this.space();
+    if (this.at("]")) {
+      this.i++;
+      return true;
+    }
+    for (;;) {
+      this.space();
+      if (this.value() === undefined) return false;
+      this.space();
+      if (this.at(",")) this.i++;
+      else if (this.at("]")) {
+        this.i++;
+        return true;
+      } else return false;
+    }
+  }
+
+  // A string, with its escapes decoded; a surrogate escaped alone, without
+  // its pair, breaks it.
+  string(): string | undefined {
+    this.i++; // "
+    let out = "";
+    while (this.i < this.s.length) {
+      const c = this.s[this.i]!;
+      if (c === '"') {
+        this.i++;
+        return out;
+      }
+      if (c < " ") return undefined;
+      if (c !== "\\") {
+        out += c;
+        this.i++;
+        continue;
+      }
+      const e = this.s[this.i + 1];
+      this.i += 2;
+      const k = e === undefined ? -1 : '"\\/bfnrt'.indexOf(e);
+      if (k >= 0) {
+        out += '"\\/\b\f\n\r\t'[k];
+        continue;
+      }
+      if (e !== "u") return undefined;
+      let u = this.hex4();
+      if (u === undefined || (u >= 0xdc00 && u <= 0xdfff)) return undefined;
+      if (u >= 0xd800 && u <= 0xdbff) {
+        if (!this.s.startsWith("\\u", this.i)) return undefined;
+        this.i += 2;
+        const low = this.hex4();
+        if (low === undefined || low < 0xdc00 || low > 0xdfff)
+          return undefined;
+        u = 0x10000 + ((u - 0xd800) << 10) + (low - 0xdc00);
+      }
+      out += String.fromCodePoint(u);
+    }
+    return undefined;
+  }
+
+  // The four hexadecimal digits of an escape \u.
+  hex4(): number | undefined {
+    const h = this.s.slice(this.i, this.i + 4);
+    if (!/^[0-9a-fA-F]{4}$/.test(h)) return undefined;
+    this.i += 4;
+    return parseInt(h, 16);
+  }
+
+  literal(word: string): boolean {
+    if (!this.s.startsWith(word, this.i)) return false;
+    this.i += word.length;
+    return true;
+  }
+
+  // A number of the grammar of RFC 8259: a minus, an integer part without
+  // leading zeros, and an optional fraction and exponent.
+  number(): boolean {
+    const digits = (): number => {
+      const from = this.i;
+      while (this.i < this.s.length && /[0-9]/.test(this.s[this.i]!))
+        this.i++;
+      return this.i - from;
+    };
+    if (this.at("-")) this.i++;
+    if (this.at("0")) this.i++;
+    else if (digits() === 0) return false;
+    if (this.at(".")) {
+      this.i++;
+      if (digits() === 0) return false;
+    }
+    if (this.at("e") || this.at("E")) {
+      this.i++;
+      if (this.at("+") || this.at("-")) this.i++;
+      if (digits() === 0) return false;
+    }
+    return true;
+  }
+}
+
+/**
+ * The round of drand's JSON (spec v0.16, §47.1): a number without sign,
+ * fraction or exponent, from 1 to 2^53 - 1, as in the release object;
+ * undefined for any other member.
+ */
+export function jsonRound(m: JSONMember): number | undefined {
+  if (m.kind !== "0" || !/^[1-9][0-9]{0,15}$/.test(m.raw)) return undefined;
+  const n = Number(m.raw);
+  return n <= MAX_SAFE_UINT ? n : undefined;
+}
+
+/**
+ * Reads the JSON of a drand relay with the strict rules of spec v0.16, §47.1,
+ * as provider.ParseDrandJSON: at most MAX_RELEASE_JSON_SIZE bytes of JSON
+ * whose value is an object, with no repeated name and names compared exactly
+ * once their escapes are decoded; "round" a number without sign, fraction or
+ * exponent, from 1 to 2^53 - 1; "signature" a string of hexadecimal, in lower
+ * or upper case; and "randomness", when present, a string with SHA-256 of the
+ * signature in hexadecimal. Other members are ignored. Any failure is
+ * ERR_RELEASE_INVALID, with the texts of the reference. The release names no
+ * chain. The page reads the answers of the relays of drand with it too.
+ */
+export async function parseDrandJSON(b: Uint8Array): Promise<Release> {
   if (b.length > MAX_RELEASE_JSON_SIZE) {
     throw new DateKeysError(
       "ERR_RELEASE_INVALID",
@@ -240,45 +479,31 @@ async function parseDrandJSON(b: Uint8Array): Promise<ParsedRelease> {
       "ERR_RELEASE_INVALID",
       "provider: drand JSON: malformed, or without round or signature",
     );
-  const text = new TextDecoder().decode(b);
-  const members = jsonMembers(text);
+  const members = strictJSON(b);
   if (members === undefined) throw malformed();
-  let round: bigint | undefined;
+  let round: number | undefined;
   let signature: string | undefined;
-  let randomness = "";
-  let typeError = false;
-  for (const [key, raw] of members) {
-    const name = foldName(key);
-    if (name === "round") {
-      if (raw === "null") round = undefined;
-      else if (/^(0|[1-9][0-9]*)$/.test(raw) && BigInt(raw) < 2n ** 64n)
-        round = BigInt(raw);
-      else typeError = true;
-    } else if (name === "signature" || name === "randomness") {
-      if (raw === "null") {
-        if (name === "signature") signature = undefined;
-      } else if (raw.startsWith('"')) {
-        const v = JSON.parse(raw) as string;
-        if (name === "signature") signature = v;
-        else randomness = v;
-      } else {
-        typeError = true;
-      }
+  let randomness: string | undefined;
+  for (const m of members) {
+    if (m.name === "round") {
+      round = jsonRound(m);
+      if (round === undefined) throw malformed();
+    } else if (m.name === "signature" || m.name === "randomness") {
+      if (m.kind !== '"') throw malformed();
+      if (m.name === "signature") signature = m.str;
+      else randomness = m.str;
     }
   }
-  if (typeError || round === undefined || signature === undefined)
-    throw malformed();
+  if (round === undefined || signature === undefined) throw malformed();
   if (!/^([0-9a-fA-F]{2})*$/.test(signature)) {
     throw new DateKeysError(
       "ERR_RELEASE_INVALID",
       "provider: drand JSON: signature is not hex",
     );
   }
-  const sig = Uint8Array.from(signature.match(/../g) ?? [], (h) =>
-    parseInt(h, 16),
-  );
+  const sig = fromHex(signature);
   if (
-    randomness !== "" &&
+    randomness !== undefined &&
     randomness.toLowerCase() !== toHex(await sha256(sig))
   ) {
     throw new DateKeysError(
@@ -286,81 +511,7 @@ async function parseDrandJSON(b: Uint8Array): Promise<ParsedRelease> {
       "provider: drand JSON: randomness does not match the signature",
     );
   }
-  return {
-    round: round <= BigInt(MAX_SAFE_UINT) ? Number(round) : round,
-    signature: sig,
-  };
-}
-
-// Go's encoding/json matches a key to a field name without case: ASCII
-// letters in lower case, and any other character as unicode.ToLower of
-// unicode.ToUpper, so that U+017F (long s) is an s and U+212A (Kelvin) a k.
-function foldName(s: string): string {
-  let out = "";
-  for (const c of s)
-    out +=
-      c.charCodeAt(0) < 0x80 ? c.toLowerCase() : c.toUpperCase().toLowerCase();
-  return out;
-}
-
-// The members of the object that `text` is, as [key, raw value text] in
-// their order, or undefined when `text` is not one JSON object. JSON.parse
-// checks the grammar, the same as Go's; the scan then only splits valid text.
-function jsonMembers(text: string): [string, string][] | undefined {
-  // Its first byte other than a space is "{": valid JSON is an object.
-  try {
-    JSON.parse(text);
-  } catch {
-    return undefined;
-  }
-  const out: [string, string][] = [];
-  let i = 0;
-  const ws = (): void => {
-    while (i < text.length && " \t\n\r".includes(text[i]!)) i++;
-  };
-  const skipString = (): void => {
-    i++;
-    while (text[i] !== '"') i += text[i] === "\\" ? 2 : 1;
-    i++;
-  };
-  const skipValue = (): void => {
-    if (text[i] === '"') return skipString();
-    if (text[i] === "{" || text[i] === "[") {
-      let depth = 0;
-      do {
-        const c = text[i]!;
-        if (c === '"') {
-          skipString();
-          continue;
-        }
-        if (c === "{" || c === "[") depth++;
-        else if (c === "}" || c === "]") depth--;
-        i++;
-      } while (depth > 0);
-      return;
-    }
-    while (i < text.length && !",}] \t\n\r".includes(text[i]!)) i++;
-  };
-  ws();
-  i++; // {
-  ws();
-  while (text[i] !== "}") {
-    const k0 = i;
-    skipString();
-    const key = JSON.parse(text.slice(k0, i)) as string;
-    ws();
-    i++; // :
-    ws();
-    const v0 = i;
-    skipValue();
-    out.push([key, text.slice(v0, i)]);
-    ws();
-    if (text[i] === ",") {
-      i++;
-      ws();
-    }
-  }
-  return out;
+  return { round, signature: sig };
 }
 
 /**
diff --git a/src/lib/dkc/security.test.ts b/src/lib/dkc/security.test.ts
index 32249d3..aeb9c50 100644
--- a/src/lib/dkc/security.test.ts
+++ b/src/lib/dkc/security.test.ts
@@ -9,7 +9,7 @@
 import { describe, expect, it } from 'vitest';
 import { h, hx } from './testing/testdata.ts';
 import { arr, b, bn, map, t, u } from './testing/cborhex.ts';
-import { encodeSecurity, evaluateSecurity, type Verdict, verdictLines, verdictText } from './security.ts';
+import { encodeSecurity, evaluateSecurity, sealReasonText, type Verdict, verdictLines, verdictText } from './security.ts';
 
 const EMPTY = 'a20071646174656b6579732d73656375726974790101';
 // An author-signature of alg 1 with a key of 32 zero bytes and a signature
@@ -86,21 +86,27 @@ describe('verdictLines', () => {
     expect(verdictText('S0')).toBe('');
   });
 
-  // F6 and S4 write the names that the reader found (spec v0.12 §29.7, §29.10), each between « and »: a signer sealed
-  // before the round time or not, with the authority of its seal, the warning that DateKeys does not check who issued
-  // the seals, and a signer who does not count, with its result in Spanish.
+  // F6 and S4 write the names that the reader found (spec v0.16 §29.7, §29.10), each between « and »: a signer whose seal
+  // proves that it came before the round time or not, and then why not, with the authority of its seal, the warning
+  // that DateKeys does not check who issued the seals, and a signer who does not count, with its result in Spanish.
   it('writes the lines of F6 and S4 from the signers and the authorities that were found', () => {
     const t = { seconds: 1_790_000_000, nanos: 0 };
     const line = (holder: string, before: boolean, result = 'valid') => ({ holder, issuer: `emisor de ${holder}`, result, sealHolder: `TSA de ${holder}`, sealTime: t, before });
     const lines = verdictLines({
       signature: 'F6',
       seal: 'S4',
-      detail: { signers: [line('Ana', true), line('Luis', false)], foreign: [line('Otro', true, 'invalid')], sealHolder: 'TSA', sealTime: t },
+      detail: {
+        signers: [line('Ana', true), { ...line('Luis', false), reason: 'late' }, { ...line('Eva', false), reason: 'no accuracy, BTSP' }],
+        foreign: [line('Otro', true, 'invalid')],
+        sealHolder: 'TSA',
+        sealTime: t,
+      },
     });
     expect(lines).toEqual([
-      'Firmado con un certificado a nombre de «Ana», «Luis». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.',
+      'Firmado con un certificado a nombre de «Ana», «Luis», «Eva». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.',
       '  «Ana» (emisor según su certificado: «emisor de Ana»), sellado por «TSA de Ana» el 2026-09-21T14:13:20Z, antes de la fecha de apertura.',
-      '  «Luis» (emisor según su certificado: «emisor de Luis»), sellado por «TSA de Luis» el 2026-09-21T14:13:20Z, no antes de la fecha de apertura.',
+      '  «Luis» (emisor según su certificado: «emisor de Luis»), sellado por «TSA de Luis» el 2026-09-21T14:13:20Z, sin acreditar que fuera antes de la fecha de apertura: se selló después de esa fecha o demasiado cerca de ella.',
+      '  «Eva» (emisor según su certificado: «emisor de Eva»), sellado por «TSA de Eva» el 2026-09-21T14:13:20Z, sin acreditar que fuera antes de la fecha de apertura: el sello no dice la precisión que exige su política.',
       '  DateKeys no comprueba quién emitió los sellos.',
       '  Otro firmante, «Otro»: inválida. No cuenta.',
       'Según un sello a nombre de «TSA», existía el 2026-09-21T14:13:20Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello.',
@@ -110,10 +116,10 @@ describe('verdictLines', () => {
   // No line says "antes de la fecha de apertura": no warning. A time keeps the fraction of its seal (RFC 3339).
   it('warns of who issued the seals only when a signer was sealed before the date, and writes the fraction of a time', () => {
     const t = { seconds: 1_790_000_000, nanos: 250_000_000 };
-    const late = { holder: 'Ana', issuer: 'CA', result: 'valid', sealHolder: 'TSA', sealTime: t, before: false };
+    const late = { holder: 'Ana', issuer: 'CA', result: 'valid', sealHolder: 'TSA', sealTime: t, before: false, reason: 'no accuracy' } as const;
     expect(verdictLines({ signature: 'F6', seal: 'S0', detail: { signers: [late], foreign: [] } })).toEqual([
       'Firmado con un certificado a nombre de «Ana». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.',
-      '  «Ana» (emisor según su certificado: «CA»), sellado por «TSA» el 2026-09-21T14:13:20.25Z, no antes de la fecha de apertura.',
+      '  «Ana» (emisor según su certificado: «CA»), sellado por «TSA» el 2026-09-21T14:13:20.25Z, sin acreditar que fuera antes de la fecha de apertura: el sello no dice su precisión.',
     ]);
     expect(verdictLines({ signature: 'F4', seal: 'S4', authorKey: new Uint8Array(32), detail: { signers: [], foreign: [], sealHolder: 'TSA', sealTime: { seconds: t.seconds, nanos: 1 } } })[1]).toBe(
       'Según un sello a nombre de «TSA», existía el 2026-09-21T14:13:20.000000001Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello.',
@@ -133,13 +139,26 @@ describe('verdictLines', () => {
     expect(verdictLines({ signature: 'F5', seal: 'S0', detail: { signers: [], foreign } })).toEqual([verdictText('F5'), `  Otro firmante, «Otro»: ${text}. No cuenta.`]);
   });
 
-  // The verdicts of spec v0.11 (§29.7) whose text is fixed, and those whose text names a key, a holder or a time, F3, F4, F6
-  // and S4, which verdictLines writes from what the reader found and verdictText leaves empty.
+  // The verdicts of spec v0.11 (§29.7) whose text is fixed, and those whose text names a key, a holder, a time or a
+  // reason, F3, F4, F6, S4 and, since v0.16, S5, which verdictLines writes from what the reader found and verdictText
+  // leaves empty.
   it('has the text of the verdicts of v0.11 that do not name anything, and none for those that do', () => {
     expect(verdictText('F2')).toBe('La firma no corresponde a este contenido.');
     expect(verdictText('F5')).toBe('Faltan firmas o sellos que la propia cápsula exige: trátala como no firmada.');
     expect(verdictText('S3')).toBe('El sello no corresponde a este contenido.');
-    expect(verdictText('S5')).toBe('Sellado después de la fecha de apertura: no prueba nada anterior.');
-    for (const v of ['F3', 'F4', 'F6', 'S4'] as const) expect(verdictText(v), v).toBe('');
+    for (const v of ['F3', 'F4', 'F6', 'S4', 'S5'] as const) expect(verdictText(v), v).toBe('');
+  });
+
+  // Spec v0.16, §29.7: S5 says why the seal does not prove that it came before the opening date, with the reason of the
+  // reader; without the detail of a valid seal it shows nothing, as in Go.
+  it('writes S5 with its reason', () => {
+    const t = { seconds: 1_790_000_000, nanos: 0 };
+    const s5 = (sealReason: 'late' | 'no accuracy' | 'no accuracy, BTSP'): string | undefined =>
+      verdictLines({ signature: 'F0', seal: 'S5', detail: { signers: [], foreign: [], sealHolder: 'TSA', sealTime: t, sealReason } })[1];
+    expect(s5('late')).toBe('No acredita que se sellara antes de la fecha de apertura: se selló después de esa fecha o demasiado cerca de ella.');
+    expect(s5('no accuracy')).toBe('No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión.');
+    expect(s5('no accuracy, BTSP')).toBe('No acredita que se sellara antes de la fecha de apertura: el sello no dice la precisión que exige su política.');
+    expect(verdictLines({ signature: 'F0', seal: 'S5' })).toEqual(['Sin firma de autor.']);
+    expect(sealReasonText(undefined)).toBe('');
   });
 });
diff --git a/src/lib/dkc/security.ts b/src/lib/dkc/security.ts
index c9539a7..057c526 100644
--- a/src/lib/dkc/security.ts
+++ b/src/lib/dkc/security.ts
@@ -1,8 +1,8 @@
 // The security area of a format 3 capsule (spec §29.3, §29.7), as
 // EncodeSecurity, EvaluateSecurityIn and the verdicts of the Go package
-// capsule give them at the draft v0.12 (format3.go, signature.go), the texts
-// of the verdicts of a certificate included. SECURITY_CBOR is the map
-// {0: "datekeys-security", 1: 1, ? 2: author-signature, ? 3: seal}, whose
+// capsule give them at v0.16 (format3.go, signature.go), the texts of the
+// verdicts of a certificate and the reasons of S5 included. SECURITY_CBOR is
+// the map {0: "datekeys-security", 1: 1, ? 2: author-signature, ? 3: seal}, whose
 // keys 2 and 3 hold CBOR encoded apart. In the context of a capsule it checks
 // the signature of alg 1 with the strict profile of ed25519strict.ts, and the
 // signature of alg 2 and the seal of seal_type 2 with securitycms.ts. The
@@ -18,7 +18,7 @@ import { verifyStrict } from './ed25519strict.ts';
 import { DateKeysError } from './errors.ts';
 import { formatRFC3339Nano, type Instant } from './datekey.ts';
 import { fieldOf, requireKeys } from './schema.ts';
-import { type Detail, evaluateCMS, evaluateSeal } from './securitycms.ts';
+import { type Detail, evaluateCMS, evaluateSeal, type SealReason } from './securitycms.ts';
 
 export const SECURITY_TYPE_TAG = 'datekeys-security';
 export const SECURITY_VERSION = 1;
@@ -47,7 +47,10 @@ export const SEAL_TYPE_RFC3161 = 2;
  *   algorithm outside the table;
  * - S2: a seal that does not decode or breaks its schema;
  * - S3: a seal that does not correspond to this content;
- * - S4 and S5: a valid seal, from before the time of the round or not.
+ * - S4: a valid seal with accuracy and t + accuracy < round_time (spec
+ *   v0.16, §29.11);
+ * - S5: a valid seal that does not prove that it came before round_time;
+ *   Detail.sealReason says why.
  */
 export type Verdict = 'X' | 'F0' | 'F1' | 'F2' | 'F3' | 'F4' | 'F5' | 'F6' | 'S0' | 'S1' | 'S2' | 'S3' | 'S4' | 'S5';
 
@@ -78,7 +81,11 @@ export interface SecurityContext {
   readonly authorKeys?: ReadonlyMap<string, string>;
 }
 
-/** The text of a verdict that the official SDK shows, in Spanish (spec §29.7), and '' for S0, which shows nothing. */
+/**
+ * The text of a verdict that the official SDK shows, in Spanish (spec §29.7),
+ * and '' for S0, which shows nothing, and for the verdicts whose text names a
+ * key, a holder, a time or a reason, which verdictLines writes.
+ */
 export function verdictText(v: Verdict): string {
   switch (v) {
     case 'X':
@@ -97,18 +104,36 @@ export function verdictText(v: Verdict): string {
       return 'Faltan firmas o sellos que la propia cápsula exige: trátala como no firmada.';
     case 'S3':
       return 'El sello no corresponde a este contenido.';
-    case 'S5':
-      return 'Sellado después de la fecha de apertura: no prueba nada anterior.';
-    // F3, F4, F6 and S4 name a key, a holder or a time: whoever shows them writes the text (spec §29.7).
+    // F3, F4, F6, S4 and S5 name a key, a holder, a time or a reason: whoever shows them writes the text (spec v0.16,
+    // §29.7).
     case 'F3':
     case 'F4':
     case 'F6':
     case 'S4':
+    case 'S5':
     case 'S0':
       return '';
   }
 }
 
+/**
+ * The reason why a valid seal does not prove that it came before the opening
+ * date, as the texts of §29.7 write it (spec v0.16), and '' for none: that of
+ * S5, and of the line of a signer of F6 whose seal does not prove it.
+ */
+export function sealReasonText(r: SealReason | undefined): string {
+  switch (r) {
+    case 'late':
+      return 'se selló después de esa fecha o demasiado cerca de ella';
+    case 'no accuracy, BTSP':
+      return 'el sello no dice la precisión que exige su política';
+    case 'no accuracy':
+      return 'el sello no dice su precisión';
+    case undefined:
+      return '';
+  }
+}
+
 // The result of a signer in the texts of §29.7.
 const RESULT_TEXT: Readonly<Record<string, string>> = {
   valid: 'válida',
@@ -126,12 +151,13 @@ const quoted = (name: string): string => `«${name}»`;
 
 /**
  * The verdicts as the official SDK shows them, in order: X alone, or the
- * signature and then the seal, when it shows something (spec §29.7). F6 is
- * followed by a line for each required signer, which names the authority of
- * its seal, by the warning that DateKeys does not check who issued the seals
- * when one of them says that it is before the opening date, and by the
- * signers who do not count. A time is in RFC 3339 with the fraction of the
- * seal.
+ * signature and then the seal, when it shows something (spec v0.16, §29.7).
+ * F6 is followed by a line for each required signer, which names the
+ * authority of its seal and says whether it proves that it came before the
+ * opening date, or why not, by the warning that DateKeys does not check who
+ * issued the seals when one of them says that it is before the opening date,
+ * and by the signers who do not count. S5 gives its reason. A time is in RFC
+ * 3339 with the fraction of the seal.
  */
 export function verdictLines(v: Verdicts): string[] {
   if (v.signature === 'X') return [verdictText('X')];
@@ -144,7 +170,7 @@ export function verdictLines(v: Verdicts): string[] {
   if (v.signature === 'F6' && d !== undefined) {
     lines[0] = `Firmado con un certificado a nombre de ${d.signers.map((s) => quoted(s.holder)).join(', ')}. DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.`;
     for (const s of d.signers) {
-      const when = s.before ? 'antes de la fecha de apertura' : 'no antes de la fecha de apertura';
+      const when = s.before ? 'antes de la fecha de apertura' : `sin acreditar que fuera antes de la fecha de apertura: ${sealReasonText(s.reason)}`;
       lines.push(`  ${quoted(s.holder)} (emisor según su certificado: ${quoted(s.issuer)}), sellado por ${quoted(s.sealHolder!)} el ${formatRFC3339Nano(s.sealTime!)}, ${when}.`);
     }
     // §29.7: whoever says that a capsule was signed before the date says that it does not check who issued the seal.
@@ -153,6 +179,8 @@ export function verdictLines(v: Verdicts): string[] {
   for (const s of d?.foreign ?? []) lines.push(`  Otro firmante, ${quoted(s.holder)}: ${RESULT_TEXT[s.result]!}. No cuenta.`);
   if (v.seal === 'S4' && d?.sealHolder !== undefined) {
     lines.push(`Según un sello a nombre de ${quoted(d.sealHolder)}, existía el ${formatRFC3339Nano(d.sealTime!)}, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello.`);
+  } else if (v.seal === 'S5' && d !== undefined) {
+    lines.push(`No acredita que se sellara antes de la fecha de apertura: ${sealReasonText(d.sealReason)}.`);
   } else if (verdictText(v.seal) !== '') {
     lines.push(verdictText(v.seal));
   }
@@ -335,7 +363,7 @@ function decodeAlg(d: Decoder): number {
 
 // What the evaluation of the signature gives, and that of the seal.
 type SignatureVerdicts = Pick<Verdicts, 'signature' | 'authorKey' | 'authorLabel' | 'detail'>;
-type SealVerdicts = { seal: Verdict; sealHolder?: string; sealTime?: Instant };
+type SealVerdicts = { seal: Verdict; sealHolder?: string; sealTime?: Instant; sealReason?: SealReason };
 
 // Runs an evaluation whose failure is a verdict, never an error: its result,
 // or `failed` when it throws, whatever it throws. The decoders throw a
@@ -376,6 +404,7 @@ export function evaluateSecurity(b: Uint8Array, context?: SecurityContext): Verd
           signers: sig.detail?.signers ?? [],
           foreign: sig.detail?.foreign ?? [],
           ...(sealed.sealHolder === undefined ? {} : { sealHolder: sealed.sealHolder, sealTime: sealed.sealTime! }),
+          ...(sealed.sealReason === undefined ? {} : { sealReason: sealed.sealReason }),
         };
   return { ...sig, seal: sealed.seal, ...(detail === undefined ? {} : { detail }) };
 }
diff --git a/src/lib/dkc/securitycms.test.ts b/src/lib/dkc/securitycms.test.ts
index 0c8bff0..d63fa3e 100644
--- a/src/lib/dkc/securitycms.test.ts
+++ b/src/lib/dkc/securitycms.test.ts
@@ -1,8 +1,8 @@
 // Tests of securitycms.ts, the verdicts of a signature of alg 2 and of a seal
-// of seal_type 2 (spec v0.12 §29.7, §29.10, §29.11), through evaluateSecurity
+// of seal_type 2 (spec v0.16 §29.7, §29.10, §29.11), through evaluateSecurity
 // in the context of a capsule, on signatures and tokens that
 // testing/cmsbuild.ts makes: the cases of signature2_test.go of the Go
-// reference at the draft v0.12, what a signer line shows of a certificate, a
+// reference at the draft v0.16, what a signer line shows of a certificate, a
 // byte order mark at the start of a name or a time, and keys whose point is
 // compressed. The hashes of the issuers below are those of the DER of their
 // Names, which the reference shows in their place.
@@ -13,7 +13,7 @@ import { ALG_CMS, ALG_ED25519, authorMessage, sealSubject, signersDigest } from
 import { compareBytes, toHex } from './bytes.ts';
 import { Encoder } from './cbor.ts';
 import { ed25519 } from '@noble/curves/ed25519.js';
-import { evaluateSecurity, type SecurityContext, type Verdicts, verdictLines, verdictText } from './security.ts';
+import { evaluateSecurity, sealReasonText, type SecurityContext, type Verdicts, verdictLines, verdictText } from './security.ts';
 import * as b from './testing/cmsbuild.ts';
 
 const certFrom = new Date(Date.UTC(2025, 0, 1));
@@ -83,11 +83,19 @@ function signersOf(...required: b.Signer[]): Uint8Array {
 }
 
 // The security area of a capsule with a signature of alg 2 by the signers, which SIGNERS requires with required, each
-// signature sealed by `authority` at `when` with an accuracy of a second, and the seal of key 3 given.
-async function cmsArea(required: b.Signer[], signers: b.Signer[], authority: b.Signer | undefined, when: Date, seal?: Uint8Array): Promise<Uint8Array> {
+// signature sealed by `authority` at `when` with an accuracy of a second, or the options of the token given, and the
+// seal of key 3 given.
+async function cmsArea(
+  required: b.Signer[],
+  signers: b.Signer[],
+  authority: b.Signer | undefined,
+  when: Date,
+  seal?: Uint8Array,
+  tokenOptions: b.TokenOptions = { accuracy: b.accuracyOf(1) },
+): Promise<Uint8Array> {
   const key1 = signersOf(...required);
   const msg = authorMessage(context.controlCommit, context.headDigest, signersDigest(ALG_CMS, key1));
-  const o: b.Options = authority === undefined ? {} : { token: (sig) => b.token(sig, when, { accuracy: b.accuracyOf(1) }, authority) };
+  const o: b.Options = authority === undefined ? {} : { token: (sig) => b.token(sig, when, tokenOptions, authority) };
   return area(item(ALG_CMS, key1, await b.signature(msg, o, ...signers)), seal);
 }
 
@@ -96,9 +104,9 @@ async function signed(authority: b.Signer | undefined, ...signers: b.Signer[]):
   return evaluateSecurity(await cmsArea(signers, signers, authority, signedAt), context);
 }
 
-// The verdicts of a seal of seal_type 2 by `authority`, without a signature.
+// The verdicts of a seal of seal_type 2 by `authority`, without a signature, with an accuracy of a second.
 async function sealed(authority: b.Signer): Promise<Verdicts> {
-  const token = await b.token(sealSubject(context.controlCommit, context.headDigest, undefined), signedAt, {}, authority);
+  const token = await b.token(sealSubject(context.controlCommit, context.headDigest, undefined), signedAt, { accuracy: b.accuracyOf(1) }, authority);
   return evaluateSecurity(area(undefined, item(2, token)), context);
 }
 
@@ -125,12 +133,29 @@ describe('a signature of alg 2', () => {
   });
 
   it('warns of who issued the seals only when a line says before the opening date', async () => {
+    // A seal after the round time proves nothing before it, and then no line warns of who issued it (spec v0.16, §29.7).
     const late = evaluateSecurity(await cmsArea([ana], [ana], tsa, new Date(roundTime.getTime() + 3_600_000)), context);
-    expect([late.signature, verdictLines(late).length]).toEqual(['F6', 2]);
-    expect(verdictLines(late)[1]).toBe('  «Ana López» (emisor según su certificado: «Ana López»), sellado por «TSA de prueba» el 2030-01-01T01:00:00Z, no antes de la fecha de apertura.');
+    expect([late.signature, verdictLines(late).length, late.detail!.signers[0]!.reason]).toEqual(['F6', 2, 'late']);
+    expect(verdictLines(late)[1]).toBe(
+      '  «Ana López» (emisor según su certificado: «Ana López»), sellado por «TSA de prueba» el 2030-01-01T01:00:00Z, sin acreditar que fuera antes de la fecha de apertura: se selló después de esa fecha o demasiado cerca de ella.',
+    );
     // t plus the accuracy of a second equal to the round time is not before it.
     const edge = evaluateSecurity(await cmsArea([ana], [ana], tsa, new Date(roundTime.getTime() - 1000)), context);
-    expect([edge.signature, edge.detail!.signers[0]!.before, verdictLines(edge).length]).toEqual(['F6', false, 2]);
+    expect([edge.signature, edge.detail!.signers[0]!.before, edge.detail!.signers[0]!.reason, verdictLines(edge).length]).toEqual(['F6', false, 'late', 2]);
+    // A seal without accuracy, years before the round time, does not prove it either; under BTSP, with its own reason.
+    for (const [o, reason] of [
+      [{}, 'no accuracy'],
+      [{ policy: b.BTSP_POLICY }, 'no accuracy, BTSP'],
+    ] as const) {
+      const v = evaluateSecurity(await cmsArea([ana], [ana], tsa, signedAt, undefined, o), context);
+      expect([v.signature, v.detail!.signers[0]!.before, v.detail!.signers[0]!.reason, verdictLines(v).length], reason).toEqual(['F6', false, reason, 2]);
+      expect(verdictLines(v)[1], reason).toBe(
+        `  «Ana López» (emisor según su certificado: «Ana López»), sellado por «TSA de prueba» el 2026-09-30T12:00:00Z, sin acreditar que fuera antes de la fecha de apertura: ${sealReasonText(reason)}.`,
+      );
+    }
+    // With BTSP and its accuracy, it proves it.
+    const btsp = evaluateSecurity(await cmsArea([ana], [ana], tsa, signedAt, undefined, { policy: b.BTSP_POLICY, accuracy: b.accuracyOf(1) }), context);
+    expect([btsp.detail!.signers[0]!.before, btsp.detail!.signers[0]!.reason, verdictLines(btsp).length]).toEqual([true, undefined, 3]);
     // A seal with a fraction of a second shows it.
     const fraction = evaluateSecurity(await cmsArea([ana], [ana], tsa, new Date(signedAt.getTime() + 250)), context);
     expect(verdictLines(fraction)[1]).toBe('  «Ana López» (emisor según su certificado: «Ana López»), sellado por «TSA de prueba» el 2026-09-30T12:00:00.25Z, antes de la fecha de apertura.');
@@ -311,14 +336,15 @@ describe('a seal of seal_type 2', () => {
     const sig = item(ALG_ED25519, ed25519.getPublicKey(seed), ed25519.sign(msg, seed));
     const subject = sealSubject(context.controlCommit, context.headDigest, sig);
     const withSeal = (token: Uint8Array): Uint8Array => area(sig, item(2, token));
-    const v = evaluateSecurity(withSeal(await b.token(subject, signedAt, {}, authority)), context);
-    expect([v.signature, v.seal, v.detail!.sealHolder, v.detail!.sealTime]).toEqual(['F4', 'S4', 'Autoridad de Sellado', at(signedAt)]);
+    const second = { accuracy: b.accuracyOf(1) };
+    const v = evaluateSecurity(withSeal(await b.token(subject, signedAt, second, authority)), context);
+    expect([v.signature, v.seal, v.detail!.sealHolder, v.detail!.sealTime, v.detail!.sealReason]).toEqual(['F4', 'S4', 'Autoridad de Sellado', at(signedAt), undefined]);
     expect(verdictLines(v)[1]).toBe('Según un sello a nombre de «Autoridad de Sellado», existía el 2026-09-30T12:00:00Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello.');
     // Sealed with its own signature part: without key 2 the subject differs.
     const alone = await sealed(authority);
     expect([alone.signature, alone.seal]).toEqual(['F0', 'S4']);
     const cases: [string, Promise<Uint8Array> | Uint8Array, string][] = [
-      ['after the round time', b.token(subject, new Date(roundTime.getTime() + 60_000), {}, authority), 'S5'],
+      ['after the round time', b.token(subject, new Date(roundTime.getTime() + 60_000), second, authority), 'S5'],
       ['the accuracy reaches it', b.token(subject, new Date(roundTime.getTime() - 1000), { accuracy: b.accuracyOf(2) }, authority), 'S5'],
       ['another subject', b.token(te.encode('other'), signedAt, {}, authority), 'S3'],
       ['an imprint of 33 bytes', b.token(subject, signedAt, { imprint: new Uint8Array(33) }, authority), 'S3'],
@@ -337,4 +363,27 @@ describe('a seal of seal_type 2', () => {
     // Without a context, as a reader of v0.10: S1.
     expect(evaluateSecurity(withSeal(await b.token(subject, signedAt, {}, authority))).seal).toBe('S1');
   });
+
+  // Spec v0.16, §29.7 and §29.11: a valid seal proves that it came before the round time only with accuracy; without
+  // it, S5 and its reason, the first that holds. An accuracy of 0 seconds, or an empty one, is a precision of 0.
+  it.each([
+    ['no accuracy, years before', {}, signedAt, 'S5', 'no accuracy'],
+    ['no accuracy under BTSP', { policy: b.BTSP_POLICY }, signedAt, 'S5', 'no accuracy, BTSP'],
+    ['no accuracy, after the round time', { policy: b.BTSP_POLICY }, roundTime, 'S5', 'late'],
+    ['an accuracy of 0 seconds', { accuracy: b.seq(b.int(0)) }, new Date(roundTime.getTime() - 1), 'S4', undefined],
+    ['an empty accuracy', { accuracy: b.seq() }, signedAt, 'S4', undefined],
+    ['BTSP with accuracy', { policy: b.BTSP_POLICY, accuracy: b.accuracyOf(1) }, signedAt, 'S4', undefined],
+    ['an accuracy of 0 at the round time', { accuracy: b.seq(b.int(0)) }, roundTime, 'S5', 'late'],
+  ] as const)('%s', async (_name, o, when, seal, reason) => {
+    const token = await b.token(sealSubject(context.controlCommit, context.headDigest, undefined), when, o, tsa);
+    const v = evaluateSecurity(area(undefined, item(2, token)), context);
+    expect([v.seal, v.detail?.sealReason]).toEqual([seal, reason]);
+    const last = verdictLines(v).at(-1);
+    if (seal === 'S5') expect(last).toBe(`No acredita que se sellara antes de la fecha de apertura: ${sealReasonText(reason)}.`);
+    else expect(last).toMatch(/^Según un sello a nombre de «TSA de prueba», existía el /);
+  });
+
+  it('has no text of its own for S5: verdictLines writes it with its reason', () => {
+    expect([verdictText('S5'), sealReasonText(undefined)]).toEqual(['', '']);
+  });
 });
diff --git a/src/lib/dkc/securitycms.ts b/src/lib/dkc/securitycms.ts
index 5e6674b..a8bf058 100644
--- a/src/lib/dkc/securitycms.ts
+++ b/src/lib/dkc/securitycms.ts
@@ -1,8 +1,9 @@
 // The verdicts of a signature of alg 2 (CMS with certificates) and of a seal of
 // seal_type 2 (RFC 3161), as the Go package capsule gives them (signature2.go,
-// spec v0.12 §29.7, §29.10, §29.11): F1, F2, F5 and F6 with the signers named,
-// and S1 to S5 with the authority of a valid seal. Internal: index.ts does not
-// re-export it.
+// spec v0.16 §29.7, §29.10, §29.11): F1, F2, F5 and F6 with the signers named,
+// and S1 to S5 with the authority of a valid seal and, for S5, the reason why
+// it does not prove that it came before the opening date. Internal: index.ts
+// does not re-export it.
 
 import { ALG_CMS, authorMessage, sealSubject, signersDigest } from './author.ts';
 import { compareBytes, equalBytes, toHex } from './bytes.ts';
@@ -22,6 +23,7 @@ import {
   type SignerInfo,
   type Token,
   tokenImprintIsSHA256,
+  tokenIsBTSP,
 } from './cms.ts';
 import { compareInstants, type Instant } from './datekey.ts';
 import { DateKeysError } from './errors.ts';
@@ -44,18 +46,40 @@ export interface SignerLine {
   /** The holder of the certificate of the authority of its seal, with the same rules, and t; undefined without a seal that verifies. */
   readonly sealHolder?: string;
   readonly sealTime?: Instant;
-  /** Whether t plus the accuracy of the seal is before round_time. */
+  /**
+   * Whether the seal proves that it came before round_time: it carries
+   * accuracy and t plus the accuracy is before round_time (spec v0.16,
+   * §29.11). For a valid signer whose seal does not, reason says why.
+   */
   readonly before: boolean;
+  readonly reason?: SealReason;
 }
 
+/**
+ * Why a valid seal does not prove that it came before the opening date (spec
+ * v0.16, §29.7): the reason of S5, and of the line of a signer of F6 that does
+ * not say «antes de la fecha de apertura», the first that holds, as
+ * SealReason of Go:
+ * - 'late': t plus the accuracy, 0 without one, is not before round_time;
+ * - 'no accuracy, BTSP': the token carries no accuracy, and its policy is
+ *   the BTSP of ETSI EN 319 421, which requires it;
+ * - 'no accuracy': the token carries no accuracy.
+ */
+export type SealReason = 'late' | 'no accuracy, BTSP' | 'no accuracy';
+
 /** What the texts of F6, S4 and S5 name (spec §29.7, §29.10). */
 export interface Detail {
   /** The required signers, in the order of SIGNERS, and the SignerInfo of other certificates, which never count. */
   readonly signers: readonly SignerLine[];
   readonly foreign: readonly SignerLine[];
-  /** The holder of the certificate of the authority of a valid seal, as §29.7 writes it, and t. */
+  /**
+   * The holder of the certificate of the authority of a valid seal, as §29.7
+   * writes it, and t. sealReason is why it does not prove that it came before
+   * round_time (S5), undefined when it does (S4).
+   */
   readonly sealHolder?: string;
   readonly sealTime?: Instant;
+  readonly sealReason?: SealReason;
 }
 
 // SIGNERS: a CBOR array of 1 to 16 strings of 32 bytes in strictly ascending order of bytes (spec §29.10). Throws a DateKeysError when it is not.
@@ -124,9 +148,13 @@ function holderText(name: string, hash: Uint8Array): string {
   return toHex(hash);
 }
 
-// The time of a seal, plus its accuracy, against round_time: whether it precedes it.
-function before(tok: Token, roundTime: Instant | undefined): boolean {
-  return roundTime !== undefined && compareInstants(addInstants(tok.genTime, tok.accuracy), roundTime) < 0;
+// The reason of a token that verifies, the first that holds (spec v0.16,
+// §29.7): late, then without accuracy under BTSP, then without accuracy;
+// undefined when it proves that it came before round_time.
+function sealReason(tok: Token, roundTime: Instant | undefined): SealReason | undefined {
+  if (roundTime === undefined || compareInstants(addInstants(tok.genTime, tok.accuracy), roundTime) >= 0) return 'late';
+  if (!tok.hasAccuracy) return tokenIsBTSP(tok) ? 'no accuracy, BTSP' : 'no accuracy';
+  return undefined;
 }
 
 // One SignerInfo as §29.10 orders: not verifiable, invalid, without seal, with an invalid seal, out of validity, or valid.
@@ -145,7 +173,9 @@ function signerLine(s: SignerInfo, msg: Uint8Array, roundTime: Instant | undefin
   }
   if (tok === undefined || !checkToken(tok, s.signature)) return { ...base, result: 'invalid seal' };
   if (!certValidAt(s.cert, tok.genTime)) return { ...base, result: 'out of validity' };
-  return { ...base, result: 'valid', sealHolder: holderText(certHolder(tok.tsa), tok.tsa.hash), sealTime: tok.genTime, before: before(tok, roundTime) };
+  const reason = sealReason(tok, roundTime);
+  const line = { ...base, result: 'valid', sealHolder: holderText(certHolder(tok.tsa), tok.tsa.hash), sealTime: tok.genTime };
+  return reason === undefined ? { ...line, before: true } : { ...line, reason };
 }
 
 /**
@@ -195,9 +225,11 @@ export function evaluateCMS(
 }
 
 /**
- * The verdict of a seal of seal_type 2 (spec §29.11): S2 or S1 for the form and
- * the algorithms, S3 when it does not verify, and S4 or S5 when it does, with
- * the authority and t. `signature` is the content of key 2, undefined without it.
+ * The verdict of a seal of seal_type 2 (spec v0.16, §29.11): S2 or S1 for the
+ * form and the algorithms, S3 when it does not verify, and S4 or S5 when it
+ * does, with the authority and t: S4 only when the token carries accuracy and
+ * t plus the accuracy is before round_time, and otherwise S5 with its reason.
+ * `signature` is the content of key 2, undefined without it.
  */
 export function evaluateSeal(
   token: Uint8Array,
@@ -205,7 +237,7 @@ export function evaluateSeal(
   controlCommit: Uint8Array,
   headDigest: Uint8Array,
   roundTime: Instant | undefined,
-): { seal: 'S1' | 'S2' | 'S3' | 'S4' | 'S5'; sealHolder?: string; sealTime?: Instant } {
+): { seal: 'S1' | 'S2' | 'S3' | 'S4' | 'S5'; sealHolder?: string; sealTime?: Instant; sealReason?: SealReason } {
   let tok;
   try {
     tok = parseToken(token);
@@ -216,5 +248,7 @@ export function evaluateSeal(
   }
   if (!tokenImprintIsSHA256(tok)) return { seal: 'S1' };
   if (!checkToken(tok, sealSubject(controlCommit, headDigest, signature))) return { seal: 'S3' };
-  return { seal: before(tok, roundTime) ? 'S4' : 'S5', sealHolder: holderText(certHolder(tok.tsa), tok.tsa.hash), sealTime: tok.genTime };
+  const valid = { sealHolder: holderText(certHolder(tok.tsa), tok.tsa.hash), sealTime: tok.genTime };
+  const reason = sealReason(tok, roundTime);
+  return reason === undefined ? { seal: 'S4', ...valid } : { seal: 'S5', ...valid, sealReason: reason };
 }
diff --git a/src/lib/dkc/testing/cmsbuild.ts b/src/lib/dkc/testing/cmsbuild.ts
index ccbea9e..69f9533 100644
--- a/src/lib/dkc/testing/cmsbuild.ts
+++ b/src/lib/dkc/testing/cmsbuild.ts
@@ -554,6 +554,8 @@ export interface TokenOptions {
   readonly accuracy?: Uint8Array;
   /** The version of the TSTInfo, 1 by default. */
   readonly version?: number;
+  /** The policy of the TSTInfo, 1.2.3.4 by default; BTSP_POLICY is that of ETSI EN 319 421. */
+  readonly policy?: string;
   /** Written as the hashed message instead of the hash of the subject, of any length. */
   readonly imprint?: Uint8Array;
   /** Written as genTime instead of the GeneralizedTime of the time given. */
@@ -572,10 +574,19 @@ export function genTimeOf(t: Date): Uint8Array {
   return generalizedTime(`${p(t.getUTCFullYear(), 4)}${p(t.getUTCMonth() + 1)}${p(t.getUTCDate())}${p(t.getUTCHours())}${p(t.getUTCMinutes())}${p(t.getUTCSeconds())}${frac}Z`);
 }
 
+/** The best practices time-stamp policy of ETSI EN 319 421, whose tokens carry accuracy (spec v0.16, §29.11). */
+export const BTSP_POLICY = '0.4.0.2023.1.1';
+
 /** The TSTInfo of a token over `subject` at `genTime`. */
 export async function tstInfo(subject: Uint8Array, genTime: Date, o: TokenOptions = {}): Promise<Uint8Array> {
   const hash = o.hash ?? 'SHA-256';
-  const fields = [int(o.version ?? 1), oid('1.2.3.4'), seq(hashAlg(hash), octets(o.imprint ?? (await digest(hash, subject)))), int(42), o.genTimeRaw ?? genTimeOf(genTime)];
+  const fields = [
+    int(o.version ?? 1),
+    oid(o.policy ?? '1.2.3.4'),
+    seq(hashAlg(hash), octets(o.imprint ?? (await digest(hash, subject)))),
+    int(42),
+    o.genTimeRaw ?? genTimeOf(genTime),
+  ];
   return seq(...fields, ...(o.accuracy === undefined ? [] : [o.accuracy]), ...(o.after ?? []));
 }
 
diff --git a/src/lib/dkc/testing/ibe-vectors.json b/src/lib/dkc/testing/ibe-vectors.json
index f1d6702..638edba 100644
--- a/src/lib/dkc/testing/ibe-vectors.json
+++ b/src/lib/dkc/testing/ibe-vectors.json
@@ -204,6 +204,16 @@
    "r": "5ab044fad730f0470dfe574e1edd192065ff12ee04909e8cfe90ebc762cf5df7",
    "file_key": "b6a845d405e6a47733b42802de903b6c"
   },
+  {
+   "name": "format3_full_chunk",
+   "round": 1000,
+   "signature": "b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39",
+   "body": "a3316bc4eb855ba46266a6de32e066c9db948af603f96bedb97d0fb82251cf3f6ff6d605837ee4deda36d486256f5ea40af6d6442706b7c128c27a14207fe55632e1226e1c423a539d3854af06b456372cd9002130d1e6e9cdaa735d35251cb91c291d2e9d448d96076508758e7fb5bdca29568439c58864ee13a042569992ea",
+   "gt": "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",
+   "sigma": "8792444c092fbf9d716911f5af1915de",
+   "r": "02c90283781a9a2f73c0b49483dd17d2dc57026f7892e67aac365b978e8f98e0",
+   "file_key": "ffa78141f5ad27edd0bb5a7886c050f6"
+  },
   {
    "name": "format3_note",
    "round": 1000,
@@ -294,6 +304,16 @@
    "r": "2bd166cc5a3e8664ed5b4cc2932e13f53c313180dea70ca9a10b420d4e83a202",
    "file_key": "916c47b45f39c0b4df425f1a248028e4"
   },
+  {
+   "name": "format3_time_and_key_words",
+   "round": 1000,
+   "signature": "b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39",
+   "body": "b451299668bf0607d4d6839784ae811b006a96ef77067ec33c7b9b8bfa9a50975dc223bafaa7a2a4b1eb7c09ae24807b13e9e5cc851e6fc7bc1f951890da76a86776e81278a30b808b08e4ed253261a5409647d785de1c9bb4202dbbab26707fea345f2c8a6048a26a9d1431174337a8b5707668bf4c81e11bfdb2895311fc2d",
+   "gt": "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",
+   "sigma": "e8c96c522ff4fb100bdbb290f607f654",
+   "r": "6916b5c1fd08176844ef3649f3a8653b2a79ca37008b14aeff9fe2eeb9599901",
+   "file_key": "7b1a19733d0d4eb54baf209550bbc7e0"
+  },
   {
    "name": "format3_tree",
    "round": 1001,
diff --git a/src/lib/dkc/testing/mutation-texts.json b/src/lib/dkc/testing/mutation-texts.json
index 37f3493..6e7d311 100644
--- a/src/lib/dkc/testing/mutation-texts.json
+++ b/src/lib/dkc/testing/mutation-texts.json
@@ -1,7 +1,7 @@
 {
  "description": "The text of the error of capsule.Open for every case of testdata/vectors/mutations.json, or ok for a capsule that opens; see the header of scripts/mutation-go-texts.go.",
  "generator": "scripts/mutation-go-texts.go",
- "spec": "0.15",
+ "spec": "0.16",
  "cases": [
   {
    "name": "PUBLIC_HEADER_A + SEALED_CONTROL_B",
diff --git a/src/lib/dkc/testing/signing-vectors.json b/src/lib/dkc/testing/signing-vectors.json
index 8856eb9..785780c 100644
--- a/src/lib/dkc/testing/signing-vectors.json
+++ b/src/lib/dkc/testing/signing-vectors.json
@@ -227,12 +227,12 @@
     "length": 32989,
     "lines": [
      "Firmado con la clave dkauthor1pdrcy0n3p9watxl83tp8r3tkauuflpakg4s6kp70nf8te5pdypqszvracp. No prueba quién la tiene.",
-     "Según un sello a nombre de «TSA de prueba», existía el 2023-08-23T15:09:27Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello."
+     "No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
     ],
     "result": "ok",
     "verdicts": [
      "F4",
-     "S4"
+     "S5"
     ]
    },
    "opened_saved": {
@@ -254,12 +254,12 @@
     "length": 32989,
     "lines": [
      "Firmado con la clave que guardaste como mi clave de 2026.",
-     "Según un sello a nombre de «TSA de prueba», existía el 2023-08-23T15:09:27Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello."
+     "No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
     ],
     "result": "ok",
     "verdicts": [
      "F3",
-     "S4"
+     "S5"
     ]
    },
    "recipe": {
@@ -363,12 +363,12 @@
     "length": 32893,
     "lines": [
      "Sin firma de autor.",
-     "Según un sello a nombre de «TSA de prueba», existía el 2023-08-23T15:09:27Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello."
+     "No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
     ],
     "result": "ok",
     "verdicts": [
      "F0",
-     "S4"
+     "S5"
     ]
    },
    "recipe": {
@@ -941,7 +941,7 @@
     "length": 32893,
     "lines": [
      "Firmado con la clave dkauthor1pdrcy0n3p9watxl83tp8r3tkauuflpakg4s6kp70nf8te5pdypqszvracp. No prueba quién la tiene.",
-     "Sellado después de la fecha de apertura: no prueba nada anterior."
+     "No acredita que se sellara antes de la fecha de apertura: se selló después de esa fecha o demasiado cerca de ella."
     ],
     "result": "ok",
     "verdicts": [
@@ -963,7 +963,7 @@
     "length": 32893,
     "lines": [
      "Firmado con la clave que guardaste como mi clave de 2026.",
-     "Sellado después de la fecha de apertura: no prueba nada anterior."
+     "No acredita que se sellara antes de la fecha de apertura: se selló después de esa fecha o demasiado cerca de ella."
     ],
     "result": "ok",
     "verdicts": [
@@ -1208,7 +1208,7 @@
      "n": 16
     }
    ],
-   "error": "capsule: self-check: the reader finds the verdicts F2 and S4 in this security area, not F4 and S4",
+   "error": "capsule: self-check: the reader finds the verdicts F2 and S5 in this security area, not F4 and S4",
    "hooks": {
     "author_message": "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a303730376433653332303735303339653232633637333430626431643439326234343365666461663935656236633339356630313330636162363033386631630a",
     "author_public": "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041",
@@ -1863,12 +1863,12 @@
     "length": 32990,
     "lines": [
      "Firmado con la clave dkauthor1xes558a6zzqw4urrz8c80u33znlv2yzc9t9f5ywa8a0c8ysq9atqt2k706. No prueba quién la tiene.",
-     "Según un sello a nombre de «Autoridad de sellado de prueba», existía el 2023-08-23T15:09:27Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello."
+     "No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
     ],
     "result": "ok",
     "verdicts": [
      "F4",
-     "S4"
+     "S5"
     ]
    },
    "opened_saved": {
@@ -1890,23 +1890,23 @@
     "length": 32990,
     "lines": [
      "Firmado con la clave que guardaste como la clave de prueba.",
-     "Según un sello a nombre de «Autoridad de sellado de prueba», existía el 2023-08-23T15:09:27Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello."
+     "No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
     ],
     "result": "ok",
     "verdicts": [
      "F3",
-     "S4"
+     "S5"
     ]
    },
    "ts": {
     "area_len": 32768,
     "lines": [
      "Firmado con la clave que guardaste como la clave de prueba.",
-     "Según un sello a nombre de «Autoridad de sellado de prueba», existía el 2023-08-23T15:09:27Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello."
+     "No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
     ],
     "verdicts": [
      "F3",
-     "S4"
+     "S5"
     ]
    }
   },
@@ -1931,23 +1931,23 @@
     "length": 32990,
     "lines": [
      "Sin firma de autor.",
-     "Según un sello a nombre de «Autoridad de sellado de prueba», existía el 2023-08-23T15:09:27Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello."
+     "No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
     ],
     "result": "ok",
     "verdicts": [
      "F0",
-     "S4"
+     "S5"
     ]
    },
    "ts": {
     "area_len": 32768,
     "lines": [
      "Sin firma de autor.",
-     "Según un sello a nombre de «Autoridad de sellado de prueba», existía el 2023-08-23T15:09:27Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello."
+     "No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
     ],
     "verdicts": [
      "F0",
-     "S4"
+     "S5"
     ]
    }
   },
@@ -2040,5 +2040,5 @@
    }
   }
  ],
- "source": "fe405e2348744f50e54c72e35ae10470a01dc552"
+ "source": "4f7885495bd6ea666cb444519090fb5f3ea46752"
 }
diff --git a/src/lib/dkc/vectors.test.ts b/src/lib/dkc/vectors.test.ts
index 06e9106..0187dfb 100644
--- a/src/lib/dkc/vectors.test.ts
+++ b/src/lib/dkc/vectors.test.ts
@@ -107,6 +107,7 @@ import {
   verifyRelease,
 } from './release.ts';
 import { evaluateSecurity, type Verdict, verdictLines } from './security.ts';
+import type { SignerLine } from './securitycms.ts';
 import { MemorySink } from './sink.ts';
 import { readVectors as readLocatorVectors } from './testing/locator.ts';
 import { kinds } from './testing/verdicts.ts';
@@ -1964,8 +1965,9 @@ describe('vectors/release.json', () => {
   });
   if (f === undefined) return;
 
-  it('has the 36 objects, 12 JSON inputs and 7 archive lookups of README, every code of step 10 among them', () => {
-    expect([f.objects.length, f.json.length, f.archive.lookups.length]).toEqual([36, 12, 7]);
+  // The JSON inputs are the 12 of v0.15 and the 26 of the strict reading of v0.16 (§47.1).
+  it('has the 36 objects, 38 JSON inputs and 7 archive lookups, every code of step 10 among them', () => {
+    expect([f.objects.length, f.json.length, f.archive.lookups.length]).toEqual([36, 38, 7]);
     expect([...new Set([...f.objects, ...f.json].map((c) => c.result))].sort()).toEqual([
       'ERR_NON_CANONICAL_CBOR',
       'ERR_PROFILE_MISMATCH',
@@ -2097,14 +2099,20 @@ describe('testdata/', () => {
   });
 
   describe('vectors of v0.11', () => {
-    // The vectors of the draft v0.12 for the verification of the signature
-    // with certificates and of the seal (§29.7, §29.10, §29.11): every area is
+    // The vectors of v0.16 for the verification of the signature with
+    // certificates and of the seal (§29.7, §29.10, §29.11): every area is
     // read in the context of its capsule and must give the verdicts of the
     // reference, the result of each signer, of those who do not count and the
     // authority of a valid seal, each time in RFC 3339 with the fraction of
-    // its token, and the lines of §29.7, byte for byte.
+    // its token, the reason why a valid seal does not prove that it came
+    // before the round time, and the lines of §29.7, byte for byte.
     describe('security_cms.json', () => {
       const RESULTS = ['valid', 'invalid', 'absent', 'without seal', 'invalid seal', 'out of validity', 'not verifiable'];
+      // The reasons of README, the first that holds (spec v0.16, §29.7).
+      const sealReason = (v: unknown, at: string): string => {
+        if (!['late', 'no accuracy', 'no accuracy, BTSP'].includes(str(v, at))) throw new FormatError(at, `"${String(v)}" is not a reason of README`);
+        return v as string;
+      };
       // The results of the signers of a case, [] when the key is absent, as Go omits an empty list.
       const results = (v: unknown, at: string): unknown[] =>
         v === undefined
@@ -2112,10 +2120,11 @@ describe('testdata/', () => {
           : array(v, at).map((s, i) => {
               const w = `${at}[${i}]`;
               const o = object(s, w);
-              keys(o, w, ['holder', 'issuer', 'result', 'before_round_time'], ['seal_time']);
+              keys(o, w, ['holder', 'issuer', 'result', 'before_round_time'], ['seal_time', 'seal_reason']);
               if (!RESULTS.includes(str(o.result, `${w}.result`))) throw new FormatError(w, `"${String(o.result)}" is not a result of README`);
               const t = o.seal_time === undefined ? {} : { seal_time: str(o.seal_time, `${w}.seal_time`) };
-              return { holder: str(o.holder, `${w}.holder`), issuer: str(o.issuer, `${w}.issuer`), result: o.result, ...t, before_round_time: bool(o.before_round_time, w) };
+              const reason = o.seal_reason === undefined ? {} : { seal_reason: sealReason(o.seal_reason, `${w}.seal_reason`) };
+              return { holder: str(o.holder, `${w}.holder`), issuer: str(o.issuer, `${w}.issuer`), result: o.result, ...t, before_round_time: bool(o.before_round_time, w), ...reason };
             });
       const f = load('vectors/security_cms.json', (json) => {
         const o = object(json, 'security_cms.json');
@@ -2124,7 +2133,7 @@ describe('testdata/', () => {
         return array(o.cases, 'cases').map((v, i) => {
           const at = `cases[${i}]`;
           const c = object(v, at);
-          keys(c, at, ['name', 'security_cbor', 'context', 'signature', 'seal', 'lines'], ['signers', 'foreign_signers', 'seal_holder', 'seal_time']);
+          keys(c, at, ['name', 'security_cbor', 'context', 'signature', 'seal', 'lines'], ['signers', 'foreign_signers', 'seal_holder', 'seal_time', 'seal_reason']);
           const want = {
             signature: verdict(c.signature, `${at}.signature`),
             seal: verdict(c.seal, `${at}.seal`),
@@ -2132,6 +2141,7 @@ describe('testdata/', () => {
             foreign_signers: results(c.foreign_signers, `${at}.foreign_signers`),
             seal_holder: c.seal_holder === undefined ? '' : str(c.seal_holder, `${at}.seal_holder`),
             seal_time: c.seal_time === undefined ? '' : str(c.seal_time, `${at}.seal_time`),
+            seal_reason: c.seal_reason === undefined ? '' : sealReason(c.seal_reason, `${at}.seal_reason`),
             lines: linesOf(c.lines, `${at}.lines`),
           };
           return { name: str(c.name, at), area: hexOf(c.security_cbor), context: securityContext(c.context, `${at}.context`), want };
@@ -2139,20 +2149,23 @@ describe('testdata/', () => {
       });
       if (f === undefined) return;
 
-      it('has the 135 cases of README, which reach every verdict but X and F3', () => {
-        expect(f).toHaveLength(135);
+      it('has the 143 cases of README, which reach every verdict but X and F3, and every reason', () => {
+        expect(f).toHaveLength(143);
         const reached = new Set(f.flatMap((c) => [c.want.signature, c.want.seal]));
         expect([...reached].sort()).toEqual(['F0', 'F1', 'F2', 'F4', 'F5', 'F6', 'S0', 'S1', 'S2', 'S3', 'S4', 'S5']);
+        const reasons = (c: (typeof f)[number]): unknown[] => [c.want.seal_reason, ...c.want.signers.map((s) => (s as { seal_reason?: string }).seal_reason)];
+        expect([...new Set(f.flatMap(reasons))].filter((r) => r !== '' && r !== undefined).sort()).toEqual(['late', 'no accuracy', 'no accuracy, BTSP']);
       });
 
       it.each(f.map((c) => [c.name, c] as const))('%s', (_n, c) => {
         const v = evaluateSecurity(c.area, c.context);
-        const result = (s: { holder: string; issuer: string; result: string; sealTime?: Instant; before: boolean }): unknown => ({
+        const result = (s: SignerLine): unknown => ({
           holder: s.holder,
           issuer: s.issuer,
           result: s.result,
           ...(s.sealTime === undefined ? {} : { seal_time: formatRFC3339Nano(s.sealTime) }),
           before_round_time: s.before,
+          ...(s.reason === undefined ? {} : { seal_reason: s.reason }),
         });
         expect({
           ...kinds(v),
@@ -2160,6 +2173,7 @@ describe('testdata/', () => {
           foreign_signers: v.detail?.foreign.map(result) ?? [],
           seal_holder: v.detail?.sealHolder ?? '',
           seal_time: v.detail?.sealTime === undefined ? '' : formatRFC3339Nano(v.detail.sealTime),
+          seal_reason: v.detail?.sealReason ?? '',
           lines: verdictLines(v),
         }).toEqual(c.want);
       });
diff --git a/src/lib/dkc/version.ts b/src/lib/dkc/version.ts
index f2c991d..c4ed9d9 100644
--- a/src/lib/dkc/version.ts
+++ b/src/lib/dkc/version.ts
@@ -10,13 +10,13 @@
  * of words, the public note and the locator of datekeys.capsule; 0.3.0
  * implements spec 0.14: one drand scheme and the root of trust byte for byte;
  * 0.4.0 implements spec 0.15: the release object and a release in hand;
- * 0.5.0-dev is what comes after it.
+ * 0.5.0-dev is what comes after it, on the draft 0.16.
  */
 export const VERSION = '0.5.0-dev';
 
 /**
  * The version of the DateKeys Protocol Specification that this library
- * implements: v0.15 of the Go reference, whose shared vectors
+ * implements: the draft v0.16 of the Go reference, whose shared vectors
  * and fixtures (testdata/) all name it.
  */
-export const SPEC_VERSION = '0.15';
+export const SPEC_VERSION = '0.16';
diff --git a/src/lib/dkc/writer.ts b/src/lib/dkc/writer.ts
index 0c5555f..cbe975b 100644
--- a/src/lib/dkc/writer.ts
+++ b/src/lib/dkc/writer.ts
@@ -39,7 +39,16 @@ import { checkAuthor, checkComment, checkPath, checkTree, MAX_AUTHOR_LEN, MAX_CO
 import { cloneProfile, type Profile, validateProfile } from './profile.ts';
 import { permute, type RandomWords } from './random.ts';
 import { checkX25519Recipient, formatX25519Recipient } from './recipient.ts';
-import { encodeAuthorSignatureItem, encodeSealItem, encodeSecurity, encodeSecurityWith, evaluateSecurity, SEAL_TYPE_RFC3161, type Verdict } from './security.ts';
+import {
+  encodeAuthorSignatureItem,
+  encodeSealItem,
+  encodeSecurity,
+  encodeSecurityWith,
+  evaluateSecurity,
+  SEAL_TYPE_RFC3161,
+  type Verdict,
+  type Verdicts,
+} from './security.ts';
 import { type Detail, encodeSigners } from './securitycms.ts';
 import { timeRecipient } from './tlock.ts';
 import { checkWords, wordKey } from './wordkey.ts';
@@ -218,6 +227,14 @@ export interface Encrypted {
    * paths, with their layout and SHA-256, and the comment as written.
    */
   readonly head?: Head;
+  /**
+   * The verdicts of the security area that encryptFiles wrote, as a reader of
+   * this capsule finds them; undefined for encrypt. A valid seal that does
+   * not prove that it came before the opening date, S5 or the line of a
+   * signer of F6 with a reason, is written all the same: the writer warns of
+   * it, and offers to ask another authority (spec v0.16, §62.1 rule 19).
+   */
+  readonly security?: Verdicts;
   /** The size of the .dkc. */
   readonly size: number;
   /** The .dkc, only without an output. */
@@ -367,11 +384,13 @@ export async function writeFiles(files: readonly FileSource[], opts: EncryptOpti
     // SECURITY_CBOR and the frame are final once the control is: the
     // signature commits to it (spec §29.8). prepare builds them before
     // anything is written, with the commitments of the control, which do not
-    // depend on L, and returns the final L.
+    // depend on L, and returns the final L, keeping the verdicts of the area
+    // it built last for the result (§62.1 rule 19).
     let security: Uint8Array = new Uint8Array(0);
+    let verdicts: Verdicts | undefined;
     let frame: Uint8Array = new Uint8Array(0);
     const prepare = async (c: Control): Promise<number> => {
-      security = await securityArea(s, c, headBytes);
+      ({ security, verdicts } = await securityArea(s, c, headBytes));
       // The area is the common one, or the large one only when what was
       // signed does not fit and largeArea allows it (§62.1 rule 13).
       if (security.length <= common) area = common;
@@ -393,7 +412,7 @@ export async function writeFiles(files: readonly FileSource[], opts: EncryptOpti
       return bodyContent([frame, areaBytes, headBytes], final.files, sources, order);
     };
     const res = await seal(s, FORMAT_3, length, draws, state, body, prepare);
-    return { ...res, head: final };
+    return { ...res, head: final, security: verdicts! };
   });
 }
 
@@ -402,9 +421,11 @@ export async function writeFiles(files: readonly FileSource[], opts: EncryptOpti
 // author key or of the CMS signer, and the seal of the sealer (spec §29.3,
 // §29.8 to §29.11). The signature is made first and the seal after it, which
 // seals it. It decodes and evaluates what it returns with the rules of the
-// reader, in the context of this capsule (§62.1 rules 17, 19 and 21). The
-// caller decides the area from its length.
-async function securityArea(s: SealState, c: Control, head: Uint8Array): Promise<Uint8Array> {
+// reader, in the context of this capsule (§62.1 rules 17, 19 and 21), and
+// returns the verdicts too, so that the writer warns of a seal that does not
+// prove that it came before the opening date (rule 19). The caller decides the
+// area from its length.
+async function securityArea(s: SealState, c: Control, head: Uint8Array): Promise<{ security: Uint8Array; verdicts: Verdicts }> {
   const { authorKey, cmsSigner, sealer } = s;
   if (authorKey === undefined && cmsSigner === undefined && sealer === undefined) {
     const security = encodeSecurity();
@@ -413,7 +434,7 @@ async function securityArea(s: SealState, c: Control, head: Uint8Array): Promise
     if (v.signature !== 'F0' || v.seal !== 'S0') {
       throw new Error(`capsule: self-check: the reader finds the verdicts ${v.signature} and ${v.seal} in this security area`);
     }
-    return security;
+    return { security, verdicts: v };
   }
   const hd = headDigest(head);
   const cc = controlCommit(c, FORMAT_3);
@@ -462,13 +483,14 @@ async function securityArea(s: SealState, c: Control, head: Uint8Array): Promise
   const v = evaluateSecurity(security, { controlCommit: cc, headDigest: hd, roundTime: s.unlock });
   // A seal that proves nothing before the round time (S5) is still a seal
   // that verifies: the clock of the writer and that of the authority may
-  // differ.
+  // differ, or the token may carry no accuracy. Encrypted.security lets the
+  // caller warn of it (§62.1 rule 19).
   const sealOK = v.seal === wantSeal || (wantSeal === 'S4' && v.seal === 'S5');
   const sameKey = key === undefined ? v.authorKey === undefined : v.authorKey !== undefined && equalBytes(v.authorKey, key);
   if (v.signature !== wantSig || !sealOK || !sameKey) {
     throw new Error(`capsule: self-check: the reader finds the verdicts ${v.signature} and ${v.seal} in this security area, not ${wantSig} and ${wantSeal}${detailText(v.detail)}`);
   }
-  return security;
+  return { security, verdicts: v };
 }
 
 // What a hook returned, which must be bytes: a copy, which the hook cannot
diff --git a/src/lib/inspector/drand.test.ts b/src/lib/inspector/drand.test.ts
index db94f2d..86d4251 100644
--- a/src/lib/inspector/drand.test.ts
+++ b/src/lib/inspector/drand.test.ts
@@ -67,11 +67,32 @@ describe('fetchRelease', () => {
       'api3.drand.sh': new TypeError('blocked'),
     };
     await expect(fetchRelease(CHAIN, ROUND, relays(odd))).rejects.toThrow(
-      'Ningún relay de drand dio la firma: api.drand.sh respondió algo que no es una firma; api2.drand.sh dio la ronda undefined, no la 32668196; api3.drand.sh no se pudo conectar.',
+      'Ningún relay de drand dio la firma: api.drand.sh respondió algo que no es una firma; api2.drand.sh respondió algo que no es una firma; api3.drand.sh no se pudo conectar.',
     );
   });
 
-  // The client of the reference reads the body with json.Unmarshal, which refuses a byte order mark before the JSON.
+  // Spec v0.16, §47.1: the client of the reference reads the answers of the relays with the strict reader of drand's
+  // JSON, as a release that the caller gives: a name twice is malformed, and ROUND is another name, ignored.
+  it('reads an answer with the strict reader of drand JSON', async () => {
+    const text = (body: string): Response => new Response(body, { status: 200 });
+    const answers: Record<string, Answer> = {
+      'api.drand.sh': text(`{"round":${ROUND},"round":${ROUND},"signature":"${SIG}"}`),
+      'api2.drand.sh': text(`{"round":${ROUND},"signature":""}`),
+      'api3.drand.sh': text(`{"round":${ROUND},"signature":"${SIG}","randomness":null}`),
+    };
+    await expect(fetchRelease(CHAIN, ROUND, relays(answers))).rejects.toThrow(
+      'Ningún relay de drand dio la firma: api.drand.sh respondió algo que no es una firma; api2.drand.sh dio una firma que no es hexadecimal; api3.drand.sh respondió algo que no es una firma.',
+    );
+    const other = await fetchRelease(
+      CHAIN,
+      ROUND,
+      relays({ 'api.drand.sh': text(`{"\\u0072ound":${ROUND},"ROUND":${ROUND + 1},"signature":"${SIG}"}`), 'api2.drand.sh': 'hang', 'api3.drand.sh': 'hang' }),
+    );
+    expect(other).toEqual({ round: ROUND, signature: SIG, relay: 'https://api.drand.sh' });
+  });
+
+  // The client of the reference reads the body with provider.ParseDrandJSON, for which a byte order mark before the JSON
+  // is not a space of JSON.
   it('refuses an answer that starts with a byte order mark, as the client of the reference does', async () => {
     const body = new TextEncoder().encode(JSON.stringify({ round: ROUND, signature: SIG, randomness: RANDOMNESS }));
     const bom = new Response(new Uint8Array([0xef, 0xbb, 0xbf, ...body]), { status: 200 });
diff --git a/src/lib/inspector/drand.ts b/src/lib/inspector/drand.ts
index 1e679de..54b6661 100644
--- a/src/lib/inspector/drand.ts
+++ b/src/lib/inspector/drand.ts
@@ -2,10 +2,15 @@
 // person asks for it: the one connection the page makes to another site.
 // The relays are those of the CLI of the reference, raced as its client
 // races them (provider/drand/client.go): the same path, a timeout of 6 s, at
-// most 8 KiB an answer, no redirects, and the randomness checked against the
-// signature. The signature itself is verified in step 10 with the pinned
-// public key, so a relay cannot make the page accept a false one. A relay
-// sees the address of the person and the round asked for.
+// most 8 KiB an answer, no redirects, and the answer read as that client
+// reads it since spec v0.16, with the strict reader of drand's JSON
+// (releaseobject.ts, §47.1), the randomness checked against the signature.
+// The signature itself is verified in step 10 with the pinned public key, so
+// a relay cannot make the page accept a false one. A relay sees the address
+// of the person and the round asked for.
+
+import { toHex } from '../dkc/bytes.ts';
+import { parseDrandJSON, type Release } from '../dkc/releaseobject.ts';
 
 /** The relays the page may reach, as the Content-Security-Policy lists them. */
 export const RELAYS = ['https://api.drand.sh', 'https://api2.drand.sh', 'https://api3.drand.sh'] as const;
@@ -55,20 +60,18 @@ export async function fetchRelease(chainHash: string, round: number, fetcher: ty
     }
     if (res.status === 404) throw new RelayError('aún no la ha publicado', true);
     if (res.status !== 200) throw new RelayError(`respondió HTTP ${res.status}`);
+    // The answer is read as a release that the person gives, with the strict
+    // rules of spec v0.16, §47.1, randomness included; then its round.
     const body = await bounded(res);
-    let wire: unknown;
+    let release: Release;
     try {
-      wire = JSON.parse(body);
-    } catch {
-      throw new RelayError('respondió algo que no es una firma');
-    }
-    const { round: got, signature, randomness } = (typeof wire === 'object' && wire !== null ? wire : {}) as Record<string, unknown>;
-    if (got !== round) throw new RelayError(`dio la ronda ${String(got)}, no la ${round}`);
-    if (typeof signature !== 'string' || !/^(?:[0-9a-f]{2})+$/i.test(signature)) throw new RelayError('dio una firma que no es hexadecimal');
-    if (randomness !== undefined && (typeof randomness !== 'string' || randomness.toLowerCase() !== (await sha256Hex(signature)))) {
-      throw new RelayError('dio una aleatoriedad que no es la de su firma');
+      release = await parseDrandJSON(body);
+    } catch (err) {
+      throw new RelayError(problemOf(err as Error));
     }
-    return { round, signature: signature.toLowerCase(), relay };
+    if (release.round !== round) throw new RelayError(`dio la ronda ${release.round}, no la ${round}`);
+    if (release.signature.length === 0) throw new RelayError('dio una firma que no es hexadecimal');
+    return { round, signature: toHex(release.signature), relay };
   };
   try {
     return await Promise.any(RELAYS.map(one));
@@ -82,14 +85,20 @@ export async function fetchRelease(chainHash: string, round: number, fetcher: ty
   }
 }
 
-// The body of an answer as text, a leading U+FEFF kept: JSON.parse refuses it,
-// as json.Unmarshal does in the client of the reference.
-const BODY_TEXT = new TextDecoder('utf-8', { ignoreBOM: true });
+// What the strict reader of drand's JSON found wrong in an answer, by the text
+// of the reference that it gives, in the words of the page. A leading U+FEFF
+// is not a space of JSON: the answer is malformed, as for the client of the
+// reference.
+function problemOf(err: Error): string {
+  if (err.message.includes('signature is not hex')) return 'dio una firma que no es hexadecimal';
+  if (err.message.includes('randomness does not match the signature')) return 'dio una aleatoriedad que no es la de su firma';
+  return 'respondió algo que no es una firma';
+}
 
 // The body of an answer, read up to MAX_RESPONSE bytes and not one more.
-async function bounded(res: Response): Promise<string> {
+async function bounded(res: Response): Promise<Uint8Array> {
   const reader = res.body?.getReader();
-  if (reader === undefined) return '';
+  if (reader === undefined) return new Uint8Array(0);
   const parts: Uint8Array[] = [];
   let n = 0;
   for (let r = await reader.read(); !r.done; r = await reader.read()) {
@@ -106,11 +115,5 @@ async function bounded(res: Response): Promise<string> {
     all.set(p, at);
     at += p.length;
   }
-  return BODY_TEXT.decode(all);
-}
-
-async function sha256Hex(hex: string): Promise<string> {
-  const bytes = Uint8Array.from(hex.match(/../g)!, (b) => Number.parseInt(b, 16));
-  const sum = new Uint8Array(await crypto.subtle.digest('SHA-256', bytes));
-  return Array.from(sum, (b) => b.toString(16).padStart(2, '0')).join('');
+  return all;
 }
diff --git a/src/lib/inspector/opener.test.ts b/src/lib/inspector/opener.test.ts
index 74c3808..2d2968e 100644
--- a/src/lib/inspector/opener.test.ts
+++ b/src/lib/inspector/opener.test.ts
@@ -20,6 +20,8 @@ interface Record {
   access_policy: string;
   access_key_file?: string;
   identities?: string[];
+  capsule_id: string;
+  words_text?: string;
   plaintext_file: string;
   plaintext_sha256: string;
   format: number;
@@ -311,4 +313,20 @@ describe('openCapsule with words', () => {
     const elsewhere = await openCapsule(withWords('perro luna casa verde tren mar', '00'.repeat(16)));
     expect(elsewhere.ok && elsewhere.opened.error !== undefined).toBe(true);
   });
+
+  // Spec v0.16, annex 79.7: the official fixture of a key of words opens with its text as typed, and with its marks
+  // apart, to the files of its record.
+  it('opens format3_time_and_key_words with the text of its record', async () => {
+    const f = fixture('format3_time_and_key_words');
+    const words = { chainHash: toHex(quicknet().chainHash), round: f.record.release.round, capsuleId: f.record.capsule_id };
+    for (const text of [f.record.words_text!, f.record.words_text!.normalize('NFD')]) {
+      const r = await openCapsule({ ...f.request, words: { text, ...words } });
+      if (!r.ok) throw new Error(r.problem);
+      expect(r.opened.error).toBeUndefined();
+      const files = r.files!;
+      expect(await Promise.all(files.head.files.map(async (_, i) => toHex(await sha256(new Uint8Array(await files.file(i).arrayBuffer())))))).toEqual(
+        (f.record.files ?? []).map((x) => x.sha256),
+      );
+    }
+  });
 });
diff --git a/src/lib/inspector/release-input.test.ts b/src/lib/inspector/release-input.test.ts
index d250a2f..2a17878 100644
--- a/src/lib/inspector/release-input.test.ts
+++ b/src/lib/inspector/release-input.test.ts
@@ -26,6 +26,31 @@ describe('parseReleaseText', () => {
     expect(r).toEqual({ ok: true, release: { round: 5, signature: new Uint8Array([0xab]) }, form: 'json' });
   });
 
+  // Spec v0.16, §47.1: the strict reader of drand's JSON, so that the page reads the round that step 10 would.
+  it("reads drand's JSON strictly, as step 10 reads it", () => {
+    const round = (s: string): number | undefined => {
+      const r = parseReleaseText(s, 7);
+      return r.ok ? r.release.round : undefined;
+    };
+    expect(round('{"\\u0072ound": 1000, "signature": "ab"}')).toBe(1000);
+    expect(round('{"round": 1000, "ROUND": 1001, "Round": 1002, "signature": "ab"}')).toBe(1000);
+    expect(round('{"round": 9007199254740991, "signature": "ab"}')).toBe(9007199254740991);
+    const problem = (s: string): string => {
+      const r = parseReleaseText(s, 1000);
+      if (r.ok) throw new Error(`accepted ${s}`);
+      return r.problem;
+    };
+    expect(problem('{"round": 1000, "round": 1001, "signature": "ab"}')).toMatch(/no es JSON válido/);
+    expect(problem('{"round": 1000, "\\u0072ound": 1000, "signature": "ab"}')).toMatch(/no es JSON válido/);
+    expect(problem('{"round": 1000, "signature": "ab", "x": {"a": 1, "a": 2}}')).toMatch(/no es JSON válido/);
+    expect(problem('{"round": 1000, "signature": "ab", "x": "\\ud800"}')).toMatch(/no es JSON válido/);
+    expect(problem('{"ROUND": 1000, "signature": "ab"}')).toMatch(/round/);
+    expect(problem('{"round": 0, "signature": "ab"}')).toMatch(/round/);
+    expect(problem('{"round": 1e3, "signature": "ab"}')).toMatch(/round/);
+    expect(problem('{"round": 01000, "signature": "ab"}')).toMatch(/no es JSON válido/);
+    expect(problem('{"round": 1000, "signature": null}')).toMatch(/signature/);
+  });
+
   it('keeps a round other than the capsule one, for step 10 to reject', () => {
     const r = parseReleaseText(DRAND_1000, 1001);
     expect(r.ok && r.release.round).toBe(1000);
diff --git a/src/lib/inspector/release-input.ts b/src/lib/inspector/release-input.ts
index b369b6e..a5d46ed 100644
--- a/src/lib/inspector/release-input.ts
+++ b/src/lib/inspector/release-input.ts
@@ -5,14 +5,18 @@
 // at step 10 like any release the caller supplies (plan of phase 2,
 // decision 4, confirmed by the author on 28-09-2026).
 //
-// Of what is pasted only the round and the signature are read. drand's
-// answer also carries `randomness`, and other drand endpoints carry a public
-// key, a period or a chain hash: none of them is read, because the root of
-// trust is the pinned profile and never a remote input (spec §11, §13).
+// Of what is pasted only the round and the signature are read, with the
+// strict reader of drand's JSON of the library (spec v0.16, §47.1), so that
+// the page never reads another round than step 10 would: no name twice, names
+// exact, the round a number of 1 to 2^53 - 1. drand's answer also carries
+// `randomness`, and other drand endpoints carry a public key, a period or a
+// chain hash: none of them is read, because the root of trust is the pinned
+// profile and never a remote input (spec §11, §13).
 //
 // No noble here: this module is part of the page's initial bundle.
 
 import { fromHex } from '../dkc/index.ts';
+import { jsonRound, strictJSON } from '../dkc/releaseobject.ts';
 
 /** A release as the caller supplies it, before any verification. */
 export interface SuppliedRelease {
@@ -52,22 +56,23 @@ export function parseReleaseText(text: string, round: number): ReleaseInput {
 }
 
 function fromJSON(s: string): ReleaseInput {
-  // JSON text that starts with { and parses is an object.
-  let v: object;
-  try {
-    v = JSON.parse(s) as object;
-  } catch {
+  // JSON text that starts with { and that the strict reader reads is an
+  // object without a name twice.
+  const members = strictJSON(new TextEncoder().encode(s));
+  if (members === undefined) {
     return { ok: false, problem: 'Empieza por { pero no es JSON válido. Copia la respuesta de drand entera.' };
   }
-  const round: unknown = Object.hasOwn(v, 'round') ? (v as { round: unknown }).round : undefined;
-  const signature: unknown = Object.hasOwn(v, 'signature') ? (v as { signature: unknown }).signature : undefined;
-  if (typeof round !== 'number' || !Number.isSafeInteger(round) || round < 0) {
+  const member = (name: string) => members.find((m) => m.name === name);
+  const r = member('round');
+  const round = r === undefined ? undefined : jsonRound(r);
+  if (round === undefined) {
     return { ok: false, problem: 'El campo round falta o no es un número entero de ronda.' };
   }
-  if (typeof signature !== 'string' || !/^[0-9a-fA-F]*$/.test(signature) || signature.length % 2 !== 0 || signature === '') {
+  const signature = member('signature');
+  if (signature?.kind !== '"' || !/^(?:[0-9a-fA-F]{2})+$/.test(signature.str)) {
     return { ok: false, problem: 'El campo signature falta o no es hexadecimal.' };
   }
-  return { ok: true, release: { round, signature: fromHex(signature) }, form: 'json' };
+  return { ok: true, release: { round, signature: fromHex(signature.str) }, form: 'json' };
 }
 
 /**
diff --git a/testdata/README.md b/testdata/README.md
index 9e3c532..87126b6 100644
--- a/testdata/README.md
+++ b/testdata/README.md
@@ -94,7 +94,7 @@ extension and a noncritical CONTROL_CBOR extension. The release that opens each
 capsule, a published Quicknet signature, is in its `<name>.json`, so they all
 decrypt offline.
 
-Fourteen are in format 3. Their plaintext file is BODY, L bytes: the frame, the
+Sixteen are in format 3. Their plaintext file is BODY, L bytes: the frame, the
 security area, the head and the files (spec §29.2).
 
 | Fixture | Policy | Files | Comment | L | Padding code | P | Area | Verdicts |
@@ -113,6 +113,8 @@ security area, the head and the files (spec §29.2).
 | `format3_signed` | `time_only` | 1, `nota.txt`, with mtime | — | 32915 | 2 | 34816 | 32768 | F4, S0 |
 | `format3_signed_cms` | `time_only` | 1, `nota.txt`, with mtime | — | 32915 | 2 | 34816 | 32768 | F6, S0 |
 | `format3_sealed` | `time_only` | 1, `nota.txt`, with mtime | — | 32915 | 2 | 34816 | 32768 | F4, S4 |
+| `format3_time_and_key_words` | `time_and_key`, a key of words and 15 dummies | 1, `secreto.txt`, with mtime | — | 32944 | 2 | 34816 | 32768 | F0, S0 |
+| `format3_full_chunk` | `time_only` | 1 of 32637 bytes, with mtime | — | 65536 | 1 | 65536 | 32768 | F0, S0 |
 
 The first five were written by a writer of v0.10, with the area of 512 bytes.
 The next four only a generator of test vectors may write (spec §62.1 rule 13):
@@ -153,7 +155,20 @@ their record has a `signature` object, and `seal` in the third:
   `SEAL_SUBJECT`. The record has `seal`: `seal_subject`, the `token` in
   hexadecimal, the `holder` of the authority as §29.7 shows it, and the time.
 
-In the three, the record gives the commitments `control_commit`, `head_digest`
+The last two are of v0.16, for the annex of recovery (spec §79):
+
+- `format3_time_and_key_words` opens with a key of words (spec §38.1): the
+  text of the second vector of the annex, 79.7, «Ñandú», two spaces,
+  «PINGÜINO», a tab and «camión árbol Éter ola», whose words are «nandu
+  pinguino camion arbol eter ola». The record gives the text in `words_text`
+  and the identity it derives with this capsule_id in `identities`, with its
+  stanza in `identity_stanzas`, so that a reader without words opens it too.
+- `format3_full_chunk`: BODY and P measure 65536 bytes, so PAYLOAD_AGE ends
+  in a full STREAM chunk of age, the last one, which the annex of v0.16
+  allows (79.5). `scripts/recovery_check.sh` opens both following only the
+  annex.
+
+In the three signed ones, the record gives the commitments `control_commit`, `head_digest`
 and `signers_digest`, the text `author_message` and its `author_code`, and the
 exact content of key 2 of `SECURITY_CBOR`. An implementation checks them from
 the control, the head and the security area of the fixture, and the verdicts
@@ -358,7 +373,13 @@ one of CBOR (RFC 8949).
   case, and may have `randomness`, which must then be SHA-256 of the
   signature; it names no chain, so its `release` has no `chain_hash`. Any
   failure to read it is `ERR_RELEASE_INVALID`, and so is one of more than
-  8192 bytes; then the round and the signature, as for an object.
+  8192 bytes; then the round and the signature, as for an object. Since
+  v0.16 it is read strictly: no object of the JSON repeats a name, names are
+  compared exactly once their escapes are decoded (`"round"` is
+  `round`, and `ROUND` another name, which is ignored), an escape of a lone
+  surrogate is malformed, `round` is a number without sign, fraction or
+  exponent from 1 to 2^53 − 1, and `signature` and `randomness` are strings.
+  The cases of v0.16 follow those of v0.15 in the list.
 - `archive`: the lookups of the local archive `releases/archive_1000_1004.bin`,
   an informative format (spec v0.15, §50). It is the `header`, the
   deterministic CBOR map `{0: "datekeys-release-archive", 1: 1, 2: chain_hash,
@@ -598,9 +619,11 @@ in `security_cms.json`.
 ## `vectors/security_cms.json`
 
 Security areas with an author signature of `alg` 2, a CMS signature with
-certificates, or a time seal of `seal_type` 2, an RFC 3161 token: 135 cases,
+certificates, or a time seal of `seal_type` 2, an RFC 3161 token: 143 cases,
 each with the context of its capsule, the verdicts, the result of each signer
-and the lines of v0.12, §29.7, §29.10 and §29.11. They complete
+and the lines of v0.16, §29.7, §29.10 and §29.11. Made again for v0.16, when a
+seal without `accuracy` stopped proving that it came before the round time:
+the cases about something else carry an accuracy of a second. They complete
 `security.json`, whose areas have no valid signature or seal of these kinds.
 The file is frozen: the certificates and the tokens are made once, with test
 keys, so a second implementation reads them and must reach the same verdicts
@@ -621,10 +644,13 @@ and write the same lines. Delete the file to make it again.
   count. Each has the `holder` and the `issuer` as §29.7 shows them, its
   `result` (`valid`, `invalid`, `absent`, `without seal`, `invalid seal`,
   `out of validity` or `not verifiable`), the `seal_time` of its CAdES-T when
-  it has one, and `before_round_time`, whether that time plus its accuracy
-  precedes the round time.
+  it has one, and `before_round_time`, whether its seal proves that it came
+  before the round time: it carries `accuracy` and that time plus its accuracy
+  precedes the round time (v0.16). When it does not, `seal_reason` says why:
+  `late`, `no accuracy`, or `no accuracy, BTSP` for a token of the ETSI
+  policy 0.4.0.2023.1.1, which requires it; the first that holds.
 - `seal_holder` and `seal_time`: the authority and the time of a valid seal
-  of key 3.
+  of key 3, and `seal_reason` the reason of S5, as for a signer.
 - `lines`: the verdicts as the official SDK shows them (§29.7), byte for byte:
   the names between « and », the line of each signer with its authority, the
   warning that DateKeys does not check who issued the seals, and the times in
@@ -644,7 +670,11 @@ table, RSASSA-PSS with and without `trailerField`, an attribute with an arc of
 each string type and against each rule, `givenName` and `surname` before a
 `commonName` with its NIF included; and, over an `alg` 1 signature, the seals
 S1 to S5 at the edges of the token: its accuracy, its `genTime`, `ordering`,
-a field after the last, the imprint, `crls` and the authority.
+a field after the last, the imprint, `crls` and the authority. For v0.16: a
+token without `accuracy` years before the round time and after it, one of the
+BTSP policy without it and with it, an `accuracy` of 0 seconds and an empty
+one, which are a precision of 0, and a signer of `alg` 2 whose seal carries
+none, also under BTSP.
 
 ## `vectors/locator.json`
 
diff --git a/testdata/SOURCE.json b/testdata/SOURCE.json
index 7e46629..9aebe06 100644
--- a/testdata/SOURCE.json
+++ b/testdata/SOURCE.json
@@ -1,148 +1,156 @@
 {
   "module": "g.activething.com/go/DateKeys",
-  "commit": "aefc8f6dfe89037d71e22d5338a092ff21159429",
+  "commit": "4f7885495bd6ea666cb444519090fb5f3ea46752",
   "files": {
-    "README.md": "d26b3f507edf5afe89600f063cb509b9ef62a908b93ed476bff964b5a443bf4b",
+    "README.md": "d1b99f9d84d5d59cba341663967f4ffccd7fd14b0398d32d9c14a3b6a37c14b9",
     "fixtures/empty_payload.dkc": "871e9bf05b52bbae17f3adfbbf97b46e7f0e53aa8f57bcaa506e43f36f53a9d4",
     "fixtures/empty_payload.inspect.json": "373e5d012b023ad58bbb54cbdffe0bed9e50c637438a4083ddb74d5414c59f59",
-    "fixtures/empty_payload.json": "d1fc459ab76d4ee0231a8c6b7dfc212fcf8da90e7a392b30133f646b3a9df4db",
+    "fixtures/empty_payload.json": "4ef16c75b3a7fe543ab37ff2c08e9e5061dc2d22f4b2724fe572c658af41c72a",
     "fixtures/empty_payload.plaintext": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
     "fixtures/format2_empty_payload.dkc": "7aea2b5aa48b1a46053716f733d50fab9cd0b80b1be67631bcc06c5bb765dc21",
     "fixtures/format2_empty_payload.inspect.json": "d0bb7356d3970986e6b197640f0b3b38abe9fabf1740b745171b358aa28903ff",
-    "fixtures/format2_empty_payload.json": "699cc67dd448ba69ecc52ad97a1947175b46f9d64859a6fd018ecae8fbe12508",
+    "fixtures/format2_empty_payload.json": "98743e5fe3833290035bc764d05e2b69d56efb3ca6563be8c9f4a0d3575f55ae",
     "fixtures/format2_empty_payload.plaintext": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
     "fixtures/format2_time_and_key_portable.dkc": "600892659fe4890223e895876275f656995d170fda42b07fb2bec0ca51ce4b43",
     "fixtures/format2_time_and_key_portable.dkk": "095b7bc516a22bf0c2366f0af3cd48bfe857a2354d6e2a9b285278b95e450fe0",
-    "fixtures/format2_time_and_key_portable.dkk.json": "0f95e43881b140330415ca98a284913c22dab9af3b9e16da0f4d2b1b5229d768",
+    "fixtures/format2_time_and_key_portable.dkk.json": "6b0879f3710ee534bc29b448e22190272d1286d096961143be29cd0905c87a10",
     "fixtures/format2_time_and_key_portable.inspect.json": "522c9a98e5911c86f5f24f278971cf7c7588f6c88aaede3dd1129ee4e042868a",
-    "fixtures/format2_time_and_key_portable.json": "960bd78f54c91d0f8afcb9a1fdc18a7c7a7d74363ac1b77aa4ebef183d258dc6",
+    "fixtures/format2_time_and_key_portable.json": "c4302561ed04a182602b0bcb686d7e40472a8b8eb9458cb9a38883b00c3ac505",
     "fixtures/format2_time_and_key_portable.plaintext": "937492203d207d6fe36161b8696bf1f05b8b4cc56d855c44853f4b76aad3a05b",
     "fixtures/format2_time_and_key_recipients.dkc": "1a44fd8708c92e2e0a10cfcb1d864a71331ea9af25d97e1a42e969dc898959e3",
     "fixtures/format2_time_and_key_recipients.dkk": "2ad99b1556086ec311d7f0b3bd3aaba05e75f45c4fa22490b0d5e8bb0b1a222e",
-    "fixtures/format2_time_and_key_recipients.dkk.json": "9d7e89e390e253bc1a432fa36ca2c37abbd6e88a0ac2fc25e87c1b7bb442e7d1",
+    "fixtures/format2_time_and_key_recipients.dkk.json": "a765cffd2532bf794a03d2da53680d8d4aa43c2721368cc8f474d3fe10e10bd0",
     "fixtures/format2_time_and_key_recipients.inspect.json": "d975a9eddd45f5d59618ea2455d574d807e57daf08585e840d07986f261bf099",
-    "fixtures/format2_time_and_key_recipients.json": "34abdf930940ff7ac7b28de597bda3fdcadc94a074912e5220153bd85f9e096c",
+    "fixtures/format2_time_and_key_recipients.json": "909efe909032db2405c458952f221496751848166f9f2d23d01e7c55c286f555",
     "fixtures/format2_time_and_key_recipients.plaintext": "0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f",
     "fixtures/format2_time_and_key_sixteen.dkc": "7aaac5c18f216bf53df326ecc817179640a53408cf25dfd50488910a762dc381",
     "fixtures/format2_time_and_key_sixteen.inspect.json": "492cd0b0dca0030df9332b098d22b4f6aa4adfb57d5540de5325e3e6d5aa3667",
-    "fixtures/format2_time_and_key_sixteen.json": "30b8103e730e3cea5b8b39078b61022c8e3e168dec70c27a7aa69c83046853ee",
+    "fixtures/format2_time_and_key_sixteen.json": "a0fcad6094b3633d0d89acdcacf30f1e8b2dfd79745157455b3a1c41a4b733a0",
     "fixtures/format2_time_and_key_sixteen.plaintext": "e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9",
     "fixtures/format2_time_only.dkc": "f5a40ac6b8a08a0c12db6114c2bca23522d6a77b512b509a217fb15f367813c4",
     "fixtures/format2_time_only.inspect.json": "40a8683f5204c7b6369558e4775ae6bb6fed978097e9e660de64c06c167b043e",
-    "fixtures/format2_time_only.json": "4a3c76f1a75fbc39399c5bd7f8c355565c2ea826ad1284dd056953af8aedb009",
+    "fixtures/format2_time_only.json": "1ab9b7327c87b443c411beb9abf42bc4024fa5bbca6fc94a32054754bd087ed1",
     "fixtures/format2_time_only.plaintext": "53b8ee821fb7b678e89d4f93da1812339f6cc1ab83aac6ed1432db99df784be5",
     "fixtures/format2_time_only_bloque256.dkc": "aae769c30d04920801d8b293d30864fbe223c9c9353ec2b4907a1ee1996e39f9",
     "fixtures/format2_time_only_bloque256.inspect.json": "767766414ad547f0ba95b40059e14b62c81b5489a2afcbc683bf227334d61be7",
-    "fixtures/format2_time_only_bloque256.json": "7dbd8dc320dbed995be9cb5830ca9a50d4fb8e956b1d468408f6199c97fc26f4",
+    "fixtures/format2_time_only_bloque256.json": "777b1ed31e0232c3790b4bc856005c1d9ab04f2d537ae339fd4fcbc23a93bce0",
     "fixtures/format2_time_only_bloque256.plaintext": "53b8ee821fb7b678e89d4f93da1812339f6cc1ab83aac6ed1432db99df784be5",
     "fixtures/format2_time_only_extensions.dkc": "fb406100d5703a2e888983b3175ed34a09a34469cc722256e5cf535dd728fbe9",
     "fixtures/format2_time_only_extensions.inspect.json": "1595d793c1d35bfdaa36576b75f53d734a9e07c2a8a12036295dbaee7f5a7f5a",
-    "fixtures/format2_time_only_extensions.json": "bfe30126441ea1b1b2e9b7cb0cbbce71d5f26f98b77004893b46ebf4be6b573f",
+    "fixtures/format2_time_only_extensions.json": "ab38f1ab6ddd03dad33414ba00c1413c355b145c12ac081616c4f1390a9ca8e0",
     "fixtures/format2_time_only_extensions.plaintext": "1129768e195e2f1e50b7a6f926b6eebef120212c29b5642c8a662c503b2a9131",
     "fixtures/format3_area_1024.dkc": "41ea2eed0293e4fef7f4a307b7f16aaf1339f5bf6f4ded7a6a9ae1aebeb0133c",
     "fixtures/format3_area_1024.inspect.json": "06e6b347926242ae5540f16a053f6a3545743986989bc0be8c39918bce968686",
-    "fixtures/format3_area_1024.json": "06319a474d9e6c545185aa282be407908f98cb97a1ad5128fc0d557adc45695d",
+    "fixtures/format3_area_1024.json": "ef1cca654c906616fc6aa0ed94346846b25fb41c5240035752fb9b930c56ec4f",
     "fixtures/format3_area_1024.plaintext": "043830350a287cba1fd50f6c063f70a74209895ff0cf03147bb4e5ccdfc206b5",
     "fixtures/format3_bloque256.dkc": "ff18444f434164ba8e7b26d38c76c7855dc6b0593b2fc8b4e9a95dbf9252d55d",
     "fixtures/format3_bloque256.inspect.json": "d0007080da5ce079c6ffa3a56bf8ce519d2846a31cc1082fd027f401e4f7bade",
-    "fixtures/format3_bloque256.json": "e551a2224454cd5a416d6e91e2ab0947249a906dac3ef028a3dd45ee441e62b9",
+    "fixtures/format3_bloque256.json": "68c34409d7c992f318aae9d46dd6fed0a2b971dc6c6373a1cf9790ddf31e2bd1",
     "fixtures/format3_bloque256.plaintext": "9ff2843e40bc1280dbfea8dce9386a42d06e8b43742c2cc6257540770cb53c73",
     "fixtures/format3_comment_only.dkc": "7f98a89413f08655bbbab28b96585dfa6173c1705dd81a900deba2100d19f2ef",
     "fixtures/format3_comment_only.inspect.json": "fb56eca8bf42c8c47fde4a1d6b2580fcff386f2f58b566820731dce388542196",
-    "fixtures/format3_comment_only.json": "1aff9f9c3531e269fc48b25c4e224e6b547ba1d5eba187ed6afa3eaff82c26f8",
+    "fixtures/format3_comment_only.json": "2ce37e9c76b4d01d32563757dc1bdf8f235ba88f4d0f3eae2cca7eba9f8d00a1",
     "fixtures/format3_comment_only.plaintext": "bc5b05885e608f036d8a14fde8738a8c53b395b71c3bcee99c1eab37ea23e80e",
+    "fixtures/format3_full_chunk.dkc": "af658967b0b2c79379e25edfe3a785095e9aa2686203e93e9f30dacf27a38684",
+    "fixtures/format3_full_chunk.inspect.json": "1f07e80039804157b800c8db3d5d680948a3180684792ae6ac71d84190f03923",
+    "fixtures/format3_full_chunk.json": "353cac92a051a22db3a6e576cfa3b88e3f125436d9a8a8b4fcefd6add8136ff2",
+    "fixtures/format3_full_chunk.plaintext": "ec5bfd307b2e36c1b8e232031167401a1f06d205ccade7a054d39914ebf5c9f8",
     "fixtures/format3_note.dkc": "da1bee54231252a0fd98439e24588125c5521f6e5a2c6641b499e6b22192c0eb",
     "fixtures/format3_note.inspect.json": "dcebb62407097c757bb62552be5d315155ba8a35dec175e95c3f6fddd6e81869",
-    "fixtures/format3_note.json": "70bae49ca3ee84dcd4fecc572d500ce61cb014cc1e43385ae172cf414e10fa41",
+    "fixtures/format3_note.json": "15ab206c7444c204bb26c94f48ae53328fca63bb4d587211526dd1664b0e8dc4",
     "fixtures/format3_note.plaintext": "0468737c5141be936f59d2823122e87661d4ae155a1df036b4cad1ea6620c17b",
     "fixtures/format3_seal_unsupported.dkc": "ae3219fbdbd1de4cef6fade1a3fb3f6e5d5e2e8af54d9516b05f0a48136913ad",
     "fixtures/format3_seal_unsupported.inspect.json": "b3a7a1038192394c1f844fed994011646f3e78d1cf311c18cb5c936249b95f14",
-    "fixtures/format3_seal_unsupported.json": "fedb92f17376cb90d91bce6777e152739d63bee884809ec9458dd5610d939d66",
+    "fixtures/format3_seal_unsupported.json": "6506de0008f936d6c5f6eedd2e951ead0d465df1b4d91016039f26d120824345",
     "fixtures/format3_seal_unsupported.plaintext": "0f865221d26545762712271faf835cb2e9980f8fb15c9d3b94fb6747cf16c1df",
     "fixtures/format3_sealed.dkc": "dde5a072d8783227d28279d06d3d226a1fb967c766da626f889d1c6fd76ac9c7",
     "fixtures/format3_sealed.inspect.json": "b984a0755332bad838025e47f8e917b9f18b9bb5c068c2d1ef0070db8e42849c",
-    "fixtures/format3_sealed.json": "b925f7daae6d21c139b529a10900b9f67adb121b18670682969da3d1faa4e382",
+    "fixtures/format3_sealed.json": "7aafa982a3a244322b1bbf1bce71b9251b946573de164c4477233f3db0ec7eff",
     "fixtures/format3_sealed.plaintext": "aea0f5feb40acd81ca3b02dd21ea15510234da3ab52b374322f3206e7632d47b",
     "fixtures/format3_security_v2.dkc": "3d02b39ace010d74604554e378d22fe5ce00cecd998c0f797d657b17620b8912",
     "fixtures/format3_security_v2.inspect.json": "dba4d21f1d4e228a17c761bae9a4b8c5a91cd9c0123e3141d3782a43c139321e",
-    "fixtures/format3_security_v2.json": "47bf9cf26e04f1c87eaf669d3d3811846bffd188dc6a90b3ac96cc45ea1ff256",
+    "fixtures/format3_security_v2.json": "1dc33fe75085054921365eb023c64e57b99d30b27bbcd5ef37eb44b8126ecdca",
     "fixtures/format3_security_v2.plaintext": "0c58ef40e4b1c7afde0f6e0a1f4ed7e3d45405757c5143a095f0c2b58042669f",
     "fixtures/format3_signature_unsupported.dkc": "e8e3106d8d73bb7b845062e0fe42af21df7d7cd8f63c335cab8dedb3e690df31",
     "fixtures/format3_signature_unsupported.inspect.json": "6db653db27604cb07e2cb2c23545fb68542c121e85002762f26c6d39e63bf00c",
-    "fixtures/format3_signature_unsupported.json": "1e2e173ede53f38fb368289fc616325b18c7e07fd87d5eda28ace180087f151e",
+    "fixtures/format3_signature_unsupported.json": "052a9f2929144eaca3ca01a1f34cbe914da41a17f82356df8b3f1a1d5b856bb7",
     "fixtures/format3_signature_unsupported.plaintext": "9fe05e6b3a463371b33fc6a81b81d538e572789a8d03ace9f752a931f4ca4728",
     "fixtures/format3_signed.dkc": "3c7d3c9e24c02853a0c7761b93bea1120b27fce396468d8d0f68e53aeb668c5e",
     "fixtures/format3_signed.inspect.json": "7c37054d542869e766147350e2fa72695f209d39a03726757008e2c2291b0e97",
-    "fixtures/format3_signed.json": "725b6cdb41ad9a5d34ec5327f7b0f1b667510fea6a9b1fb714be582ed55eaaed",
+    "fixtures/format3_signed.json": "d018866c235ccc43e2c95683c989dc0d3873d7fc16f60951a81299cc09790206",
     "fixtures/format3_signed.plaintext": "3de3ccab0ac74f95a76aa45c0f85e1749d4b4a051d87e81828eff6bf24372000",
     "fixtures/format3_signed_cms.dkc": "d658f8d5ac2c5550c07b8f8fd6883b2f6dc02ceafc47d436ea02d8950b2548d2",
     "fixtures/format3_signed_cms.inspect.json": "afadf530e8146687b25c03f26100ebff18e7f481e0ef09378816bad582270de5",
-    "fixtures/format3_signed_cms.json": "eac7b9c2d2470ef140f41cf7c94e32657e2949a40f621a07340f7d2342ee7dc1",
+    "fixtures/format3_signed_cms.json": "af34910ff4f1ad245fb19b190b878c3eaf03c8e0e639378df37ed3488f96c12e",
     "fixtures/format3_signed_cms.plaintext": "31c35eeeee856277b605fe44203a8f4786bb8f591eda3b6ee58252df5b3cf2f0",
     "fixtures/format3_single.dkc": "9f68664af8733255084be9036a100b75d27bd16106bf0acff94ce469dd1d1743",
     "fixtures/format3_single.inspect.json": "7878da921c17aada50e00d5911ea97e8558633a1684fb96acbd00d6f1b117529",
-    "fixtures/format3_single.json": "0a31c6d416ec3e6acd891172881f4f5738c36e01c9583be48f0376324641d17b",
+    "fixtures/format3_single.json": "5ac7e261a24c1591afc4406d444f0f7f92af810dbcc17454f3f076d22deab333",
     "fixtures/format3_single.plaintext": "74f9dd84d07e95a31e6dc063bf65ce414197acf84aac445eabc76fa4e3f24936",
     "fixtures/format3_time_and_key_portable.dkc": "680d29962e575689a31543df28433dae7737abd9a793e9cae92ef40920d09636",
     "fixtures/format3_time_and_key_portable.dkk": "54cc64d849395234b3e093e47f432b72781ccc13f455c9ef394e3554ab566751",
-    "fixtures/format3_time_and_key_portable.dkk.json": "a3aff664132ec3d6da8f016c44978733ad8b9e500dec08d5c08a1a1c39a09071",
+    "fixtures/format3_time_and_key_portable.dkk.json": "968c5d8cde65ae066671635c9f5679233e00e982977fcaadcedfa1483a5ef246",
     "fixtures/format3_time_and_key_portable.inspect.json": "f269af86f5bf84c22a1038fd78db146af93166150755eb1ca35cf15e224035b4",
-    "fixtures/format3_time_and_key_portable.json": "0a545aab8299c5af039b57092276cf5db62e73ef74e6e1046834f6886a34bbf0",
+    "fixtures/format3_time_and_key_portable.json": "8bc86ac3455f77d2996e952f4b3430e002111a731b2d8d12217cffc07cc5256f",
     "fixtures/format3_time_and_key_portable.plaintext": "e6684cf607c102bfa4d6977742d5a7520b0e09483282181bd6d8f5f4ba5f7726",
+    "fixtures/format3_time_and_key_words.dkc": "64a11824630b6134892087a4d4ad3ee6e27941513507ad17fc87a7a2b4421e33",
+    "fixtures/format3_time_and_key_words.inspect.json": "838b2fe32b73bfd2ed45b2104170ec8532909d03ed0772e9baacf2c254fa4c32",
+    "fixtures/format3_time_and_key_words.json": "083e84c42ea89544fcc7c39665ec8815d272727bbc0907932412a43402396c92",
+    "fixtures/format3_time_and_key_words.plaintext": "2ff49df00ad9a37446c626be6d0353e94bd3bf41d73a6141e10f77b586abcb67",
     "fixtures/format3_tree.dkc": "217f378faaf795f6a9c416b564fb8931bb2e896918aee870120fd14f9a5da7d1",
     "fixtures/format3_tree.inspect.json": "643a9dfdc2d0c44b8a1636909c66ed81bfd8c50df2a4cad6566832a8e47ba938",
-    "fixtures/format3_tree.json": "1d2ed3e28c5075ead9898757b971298273c4b20acee27911286dc250aa7d0143",
+    "fixtures/format3_tree.json": "3a97244352fffae5cc980bb278ecd3e201d6c89ac867656e1ca4956e71b10c1a",
     "fixtures/format3_tree.plaintext": "f69ac5f450966f7d0e9161aa37451d4260b194a750e3e132c02e8a15ba561cfa",
     "fixtures/format3_unsigned.dkc": "317ab722ae3812a25ddd78b4c98c586363e5587c8d3634c881ce7c421af19168",
     "fixtures/format3_unsigned.inspect.json": "2f52f7286d6bd4c846ddd63b10b4989b25d17501a989a2e9deb25e4db0859e1a",
-    "fixtures/format3_unsigned.json": "bce5d7fcf60ddb553e2bbe5b501892ae7a13488b4095fdad598dc3207690dfb3",
+    "fixtures/format3_unsigned.json": "cac5778e7e8d5cf86bcba0c7893ae45387cba43b93a8a7877ffc60d6e469b346",
     "fixtures/format3_unsigned.plaintext": "25527e5e2e1ce02056d4419fb89f7b0ce35e4920f93217f58dcf62a4377f8af5",
     "fixtures/time_and_key_portable.dkc": "2e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972",
     "fixtures/time_and_key_portable.dkk": "e528fa2c832c91119f0684bb9d6fb3c4c2d0d55183482890e7c4fe92f668426a",
-    "fixtures/time_and_key_portable.dkk.json": "4535028d6559cd368a44a6f03ebf8bcbcc2bdac4fcf13374aae541618b81c99f",
+    "fixtures/time_and_key_portable.dkk.json": "6f1c5c6fae50d37e7afd9731992353063e2c9ed4ef3b736c840a10f60d43ef0e",
     "fixtures/time_and_key_portable.inspect.json": "238c1f8ca6a6bf69f20bf26f5676e89a0b07e83b4362628560fc2f7522a202c9",
-    "fixtures/time_and_key_portable.json": "389f36834ffb86a4c60950872a540caf8a8a94f65d02f56ce5f7922e06bf933c",
+    "fixtures/time_and_key_portable.json": "9c80f7a9ace3e5cbb180d9f6109626ec6c8ae3a8b131e26aa3feda60f35600db",
     "fixtures/time_and_key_portable.plaintext": "937492203d207d6fe36161b8696bf1f05b8b4cc56d855c44853f4b76aad3a05b",
     "fixtures/time_and_key_portable_extension.dkk": "0bf463a7c65627b7dda2234d728df89ec5b835816a2a37b91497d8fecc5ea548",
-    "fixtures/time_and_key_portable_extension.dkk.json": "e6f4015f10403926a8e2d3399f78ba99a48ce6c4760e24174c1521046c23efb2",
+    "fixtures/time_and_key_portable_extension.dkk.json": "9f931c77aa5e98b51d21f3b875b307fd647496390c295abd98a0c9a4e6825286",
     "fixtures/time_and_key_recipients.dkc": "69ac110380f5d768b5b6afaa157a50ed17d8ceccfbd4604ffa5b6da38539b635",
     "fixtures/time_and_key_recipients.dkk": "19f6c47150c3194712d454f43c7392b7344e6b4e7b074d83e9ca5f563a8e072f",
-    "fixtures/time_and_key_recipients.dkk.json": "f206ed1a51fc6aac7b2faabd2e3519224f68f7b9b9643653dbdf5b6139f042e0",
+    "fixtures/time_and_key_recipients.dkk.json": "9bd11c87bf1789872d6f0989ecebdd07958544e159ac462d799096220ce378c5",
     "fixtures/time_and_key_recipients.inspect.json": "4b32c63d18febe0772837fbcd75a0c971e31378bf799201b720a9d32bdcd8c2b",
-    "fixtures/time_and_key_recipients.json": "2cdbc03ef027879b36c68de56e205960e774858a3ff170aba66d630de27c7303",
+    "fixtures/time_and_key_recipients.json": "733da9ee7d1122a254f0ad45e5c2e530884fe75fc85648ad0df093ad5dbb42b2",
     "fixtures/time_and_key_recipients.plaintext": "0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f",
     "fixtures/time_only.dkc": "99e915810d595f1092700b728f5e5081d78efe83f5343e76325b1bcc2c33ccf2",
     "fixtures/time_only.inspect.json": "a4d45f945d6ba6616c01e120ac1133785e5279fea7dcab706b5feee287be8884",
-    "fixtures/time_only.json": "9e66fedbfcf6ffec45648d8afdb7592eecd645751703051d1f60af1d0b7f9f01",
+    "fixtures/time_only.json": "a1d321bee1f31fb70affb32327cb360c7134c9dda3879519e683e5a6606d4add",
     "fixtures/time_only.plaintext": "53b8ee821fb7b678e89d4f93da1812339f6cc1ab83aac6ed1432db99df784be5",
     "fixtures/time_only_extensions.dkc": "0446c9b73e267adcb24e5cc89afba2544a386ec9a050016e06517a4a57aa2085",
     "fixtures/time_only_extensions.inspect.json": "6f957b028da8a4a495b5e951ced0b91e0678128dac4e962b02d024b9439a0ba1",
-    "fixtures/time_only_extensions.json": "4bb636805cc681ba1c74aa426f5afda72580f4350929a720da49eeccee3eb2be",
+    "fixtures/time_only_extensions.json": "5dd015716747d6b8b3b9ab7aa6eccdb6edde4bd5023c1f15e75b1cd3961d9fd9",
     "fixtures/time_only_extensions.plaintext": "1129768e195e2f1e50b7a6f926b6eebef120212c29b5642c8a662c503b2a9131",
     "releases/1000.cbor": "5d2e86210d2e8d64ce36e55edf3ff6c8997fda4bc06fec7fd5feb0dd6cab8293",
     "releases/1001.cbor": "2b55dcc09dfe8fa97192aa6d9a85f9fc50206142d52f66329261cfe9e03de755",
     "releases/1004.cbor": "aabdffe0fb944d8796528a6682fdbafb448b1e5da164ee039b6c3ee7f354e766",
     "releases/2000.cbor": "9e37be0004850faaa8541658a90ee8aba0832fccf2b695df42c89cb3f7de29ff",
     "releases/archive_1000_1004.bin": "bb53d542abd704f3af9f6436c9178f65bf812a06630607b3aad3a09eaed0cce1",
-    "vectors/cbor.json": "715c8e7ca88d17c4e68a8764350217f108e96484e59282d384a032169d36bfb8",
-    "vectors/dk1.json": "e2b849b1f606e7961a8571c305dcd0c4374f03c8943a3a715b20a9a43002ea44",
-    "vectors/ed25519_strict.json": "eb47ac6b5e879ca3e115f6551b81e5b6fe5bf5050aa7b829804e915705c3a1ad",
-    "vectors/head_schema.json": "29493360d4cf97c3ad488a8ce58221804b17511523756cea1efb87e6fbc13444",
-    "vectors/inspect_differential.json": "bdc5210415084cde71aa84fbaa7ebbcd81e0f1800b411c6dbacc5e553b4021dd",
-    "vectors/locator.json": "02476c2f5e421bfc35e2f7b2498ab1d395fd7ef5971fb46dd16fe0abfb6f7a11",
-    "vectors/mutations.json": "e3ce6a57a57e49bfdb726fb8e9e6e36711c65a23b08e751aab00f8c4dbfcade3",
-    "vectors/note.json": "f02feea92b22c98227c21e725b3d3e8b303ec647c4cab3fd9b4b71261273818e",
-    "vectors/padding.json": "7cd6ac71fd978e21c5f93870a211035f98028b9020422f727e407c477e4514bb",
-    "vectors/path_fold.json": "75e4fa473da4b394d32ac107a5e9559b0d3358ce1b39e5d7403366aa35c2efff",
-    "vectors/paths.json": "a33ecdbd6a191d693600e18879e15a5813d77b133d46f30c5535aae72eeaeb04",
-    "vectors/profile_quicknet.json": "e291d5167cdce9b9e24993571a7f349e35fbbcfea793665883ec9ec8d479b498",
-    "vectors/quicknet_rounds.json": "bf990896dddc51a91e309143fede773adeae918ef47433e0ab6132a4456ce9a8",
-    "vectors/release.json": "97bd46e055024a00f6a765f840b47ebfea5dad1e08a88c70d2cf42a77df6d2ba",
-    "vectors/resolved_ip.json": "7c554e7c3f272a62a89c3f3e97203dc7d5dc50290bbe356f4a8efd44a19eea70",
-    "vectors/security.json": "6045492767cbeb02fce5b6faf6cd0e179ffe96c898c8c023793e4a138b0277f0",
-    "vectors/security_cms.json": "4915fa3cfe93b1ad92e91a68bba7517c3b2dc3e33fd9def7340b3a045eff99cf",
-    "vectors/tlock_ibe.json": "5c1def934c89c1638187058e9dcb76ac9fffd148885a9869a1dc7b19d2df76b6",
-    "vectors/tlock_steps.json": "661c5214c30ea3ea08e7f54f779346b6e838e68a0732ea2110ddcbf07a25cd35",
-    "vectors/wordkey.json": "1ef9f07d84e7d99d68433a89371c79a407c4e10f33547210bfdf1d7378956d6b"
+    "vectors/cbor.json": "d2aacec9423d6e52dd199dee10989f161f271cfdf016f64d8ac6e0ed0a2f6719",
+    "vectors/dk1.json": "68192059df37af531601a814f9f34b39f226d44df6118375dcc4a960219346aa",
+    "vectors/ed25519_strict.json": "0469a6516423ffe9380fa41a358b208a583f22ed632e4b6b8768a172f061ed0d",
+    "vectors/head_schema.json": "7e9039aee039fa8ca09e26f73c45a740161db2ced5a667e48a9a2a692d8188bf",
+    "vectors/inspect_differential.json": "5f2b768a6b17c059fda779f7894115c16bdec30f5645800e2796c45c1733e64f",
+    "vectors/locator.json": "b1cbd347664faf15dfd3974f046675a6a315a1c4dedf67c3fc9f5d42ae6d3e57",
+    "vectors/mutations.json": "2f86da3018e68ec0cb263c608e0f7db719fd23f2bb2450f9aa054b71f958e53d",
+    "vectors/note.json": "af8806904f5f7cd5b672f00043918bd86a9576fe3d1b3724186ac1de18b15c9b",
+    "vectors/padding.json": "77504260c4d1db0e7ab3da4b9b97b3416be774ceb7813a41e61bd236b44310ef",
+    "vectors/path_fold.json": "6adcdbeec02b4082e23433c2b8ad9653a1febce9f19df18ace8668bf0254e362",
+    "vectors/paths.json": "23f9f809e17d335a4b307ec6fee3b8af8f69e7f3ad697f3f7a94ae559d1efd33",
+    "vectors/profile_quicknet.json": "ac0afa6019b232055375af6e5630c2fff505ca0a88774f095f4c1f519f6c2427",
+    "vectors/quicknet_rounds.json": "9e0630a03f839ab2152dfd9150b462e6faff77fad9fd8fe3dfcf18f0944bdedb",
+    "vectors/release.json": "fb00ad416f8b616f3a615a7a9bb735fa4a6fa254fe0ff7bce922260dfbd3927a",
+    "vectors/resolved_ip.json": "ca3dd96afdb767f57111fc7985fc1f70aa380939df7048a5b55c81172a14807f",
+    "vectors/security.json": "b45492a3559cebb6fb41c809e61a64f16d23521870e7a26f8cba92c8332bff31",
+    "vectors/security_cms.json": "b06a252fd0e72312c0ae65be30981d0651b0d76f471f651f3aaa8cc7678ec177",
+    "vectors/tlock_ibe.json": "e853eebad87722995901b063404de45383a26748299e5c493b8eb6c420de53b4",
+    "vectors/tlock_steps.json": "7e0b77593466aa213217ea03f4a344db8181759ab26d094dfc299d4ef7ef33d2",
+    "vectors/wordkey.json": "89494f886361bdbee7274f21356a814b606ef3b1716ee66117e4f3feca733dff"
   }
 }
diff --git a/testdata/fixtures/empty_payload.json b/testdata/fixtures/empty_payload.json
index 7407172..a39e630 100644
--- a/testdata/fixtures/empty_payload.json
+++ b/testdata/fixtures/empty_payload.json
@@ -1,6 +1,6 @@
 {
   "description": "time_only capsule with an empty payload",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 1,
   "file": "empty_payload.dkc",
   "sha256": "871e9bf05b52bbae17f3adfbbf97b46e7f0e53aa8f57bcaa506e43f36f53a9d4",
diff --git a/testdata/fixtures/format2_empty_payload.json b/testdata/fixtures/format2_empty_payload.json
index 5ebc622..45f6f20 100644
--- a/testdata/fixtures/format2_empty_payload.json
+++ b/testdata/fixtures/format2_empty_payload.json
@@ -1,6 +1,6 @@
 {
   "description": "format 2 time_only capsule with an empty content: L = 0, P = 256",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 2,
   "file": "format2_empty_payload.dkc",
   "sha256": "7aea2b5aa48b1a46053716f733d50fab9cd0b80b1be67631bcc06c5bb765dc21",
diff --git a/testdata/fixtures/format2_time_and_key_portable.dkk.json b/testdata/fixtures/format2_time_and_key_portable.dkk.json
index 65e01e3..3f6cbf5 100644
--- a/testdata/fixtures/format2_time_and_key_portable.dkk.json
+++ b/testdata/fixtures/format2_time_and_key_portable.dkk.json
@@ -1,6 +1,6 @@
 {
   "description": "portable X25519 .dkk of format2_time_and_key_portable.dkc",
-  "spec": "0.15",
+  "spec": "0.16",
   "file": "format2_time_and_key_portable.dkk",
   "sha256": "095b7bc516a22bf0c2366f0af3cd48bfe857a2354d6e2a9b285278b95e450fe0",
   "credential_id": "e3c7be83cbf1fbd6b115c96411b3bd01",
diff --git a/testdata/fixtures/format2_time_and_key_portable.json b/testdata/fixtures/format2_time_and_key_portable.json
index 1b201a5..4855ee4 100644
--- a/testdata/fixtures/format2_time_and_key_portable.json
+++ b/testdata/fixtures/format2_time_and_key_portable.json
@@ -1,6 +1,6 @@
 {
   "description": "format 2 time_and_key capsule with one credential, a portable .dkk, and 15 dummies",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 2,
   "file": "format2_time_and_key_portable.dkc",
   "sha256": "600892659fe4890223e895876275f656995d170fda42b07fb2bec0ca51ce4b43",
diff --git a/testdata/fixtures/format2_time_and_key_recipients.dkk.json b/testdata/fixtures/format2_time_and_key_recipients.dkk.json
index fee2fd3..ff78606 100644
--- a/testdata/fixtures/format2_time_and_key_recipients.dkk.json
+++ b/testdata/fixtures/format2_time_and_key_recipients.dkk.json
@@ -1,6 +1,6 @@
 {
   "description": "portable X25519 .dkk of format2_time_and_key_recipients.dkc",
-  "spec": "0.15",
+  "spec": "0.16",
   "file": "format2_time_and_key_recipients.dkk",
   "sha256": "2ad99b1556086ec311d7f0b3bd3aaba05e75f45c4fa22490b0d5e8bb0b1a222e",
   "credential_id": "93cedf68421710e83908ec683b104436",
diff --git a/testdata/fixtures/format2_time_and_key_recipients.json b/testdata/fixtures/format2_time_and_key_recipients.json
index 30ab2f7..23c8f77 100644
--- a/testdata/fixtures/format2_time_and_key_recipients.json
+++ b/testdata/fixtures/format2_time_and_key_recipients.json
@@ -1,6 +1,6 @@
 {
   "description": "format 2 time_and_key capsule for three known X25519 recipients and a portable .dkk, and 12 dummies",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 2,
   "file": "format2_time_and_key_recipients.dkc",
   "sha256": "1a44fd8708c92e2e0a10cfcb1d864a71331ea9af25d97e1a42e969dc898959e3",
diff --git a/testdata/fixtures/format2_time_and_key_sixteen.json b/testdata/fixtures/format2_time_and_key_sixteen.json
index e13dfbf..49c8945 100644
--- a/testdata/fixtures/format2_time_and_key_sixteen.json
+++ b/testdata/fixtures/format2_time_and_key_sixteen.json
@@ -1,6 +1,6 @@
 {
   "description": "format 2 time_and_key capsule for sixteen known X25519 recipients, without dummies",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 2,
   "file": "format2_time_and_key_sixteen.dkc",
   "sha256": "7aaac5c18f216bf53df326ecc817179640a53408cf25dfd50488910a762dc381",
diff --git a/testdata/fixtures/format2_time_only.json b/testdata/fixtures/format2_time_only.json
index 78877e6..677d12f 100644
--- a/testdata/fixtures/format2_time_only.json
+++ b/testdata/fixtures/format2_time_only.json
@@ -1,6 +1,6 @@
 {
   "description": "format 2 time_only capsule, padding code 2 (reforzado): L = 78000, P = 79872, two STREAM chunks",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 2,
   "file": "format2_time_only.dkc",
   "sha256": "f5a40ac6b8a08a0c12db6114c2bca23522d6a77b512b509a217fb15f367813c4",
diff --git a/testdata/fixtures/format2_time_only_bloque256.json b/testdata/fixtures/format2_time_only_bloque256.json
index 3a7fe89..2840808 100644
--- a/testdata/fixtures/format2_time_only_bloque256.json
+++ b/testdata/fixtures/format2_time_only_bloque256.json
@@ -1,6 +1,6 @@
 {
   "description": "format 2 time_only capsule with the content of format2_time_only and padding code 1 (bloque256): L = 78000, P = 78080",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 2,
   "file": "format2_time_only_bloque256.dkc",
   "sha256": "aae769c30d04920801d8b293d30864fbe223c9c9353ec2b4907a1ee1996e39f9",
diff --git a/testdata/fixtures/format2_time_only_extensions.json b/testdata/fixtures/format2_time_only_extensions.json
index 713efa6..a3a8dde 100644
--- a/testdata/fixtures/format2_time_only_extensions.json
+++ b/testdata/fixtures/format2_time_only_extensions.json
@@ -1,6 +1,6 @@
 {
   "description": "format 2 time_only capsule with a noncritical PUBLIC_HEADER extension and a noncritical CONTROL_CBOR extension",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 2,
   "file": "format2_time_only_extensions.dkc",
   "sha256": "fb406100d5703a2e888983b3175ed34a09a34469cc722256e5cf535dd728fbe9",
diff --git a/testdata/fixtures/format3_area_1024.json b/testdata/fixtures/format3_area_1024.json
index 0595abb..2fbad82 100644
--- a/testdata/fixtures/format3_area_1024.json
+++ b/testdata/fixtures/format3_area_1024.json
@@ -1,6 +1,6 @@
 {
   "description": "format 3 time_only capsule with a security area of 1024 bytes, as a later version may write it, holding the empty security",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 3,
   "file": "format3_area_1024.dkc",
   "sha256": "41ea2eed0293e4fef7f4a307b7f16aaf1339f5bf6f4ded7a6a9ae1aebeb0133c",
diff --git a/testdata/fixtures/format3_bloque256.json b/testdata/fixtures/format3_bloque256.json
index 080f546..0d09eac 100644
--- a/testdata/fixtures/format3_bloque256.json
+++ b/testdata/fixtures/format3_bloque256.json
@@ -1,6 +1,6 @@
 {
   "description": "format 3 time_only capsule with padding code 1 (bloque256) and one file of 20000 bytes",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 3,
   "file": "format3_bloque256.dkc",
   "sha256": "ff18444f434164ba8e7b26d38c76c7855dc6b0593b2fc8b4e9a95dbf9252d55d",
diff --git a/testdata/fixtures/format3_comment_only.json b/testdata/fixtures/format3_comment_only.json
index fa7ca4f..44b8e54 100644
--- a/testdata/fixtures/format3_comment_only.json
+++ b/testdata/fixtures/format3_comment_only.json
@@ -1,6 +1,6 @@
 {
   "description": "format 3 time_only capsule with a comment of two lines, the second one with a TAB, a declared author and no files",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 3,
   "file": "format3_comment_only.dkc",
   "sha256": "7f98a89413f08655bbbab28b96585dfa6173c1705dd81a900deba2100d19f2ef",
diff --git a/testdata/fixtures/format3_full_chunk.dkc b/testdata/fixtures/format3_full_chunk.dkc
new file mode 100644
index 0000000..748620e
Binary files /dev/null and b/testdata/fixtures/format3_full_chunk.dkc differ
diff --git a/testdata/fixtures/format3_full_chunk.inspect.json b/testdata/fixtures/format3_full_chunk.inspect.json
new file mode 100644
index 0000000..aa11e5a
--- /dev/null
+++ b/testdata/fixtures/format3_full_chunk.inspect.json
@@ -0,0 +1,61 @@
+{
+  "file": "format3_full_chunk.dkc",
+  "format": 3,
+  "capsule_id": "9c672412223e65667407568b2ffab62d",
+  "datekey": "dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0",
+  "profile": "datekeys:quicknet:v1",
+  "round": 1000,
+  "unlock_at": "2023-08-23T15:59:24Z",
+  "access_policy": "time_only",
+  "valid": true,
+  "checks": [
+    {
+      "step": 1,
+      "name": "parse DKC1",
+      "ok": true,
+      "detail": "magic DKC1"
+    },
+    {
+      "step": 2,
+      "name": "prelude",
+      "ok": true,
+      "detail": "DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458"
+    },
+    {
+      "step": 3,
+      "name": "public header",
+      "ok": true,
+      "detail": "121 bytes"
+    },
+    {
+      "step": 4,
+      "name": "header validation",
+      "ok": true,
+      "detail": "capsule_id=9c672412223e65667407568b2ffab62d datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1"
+    },
+    {
+      "step": 5,
+      "name": "sealed control structure",
+      "ok": true,
+      "detail": "one tlock stanza"
+    },
+    {
+      "step": 6,
+      "name": "payload structure",
+      "ok": true,
+      "detail": "one X25519 stanza"
+    },
+    {
+      "step": 7,
+      "name": "condition",
+      "ok": true,
+      "detail": "round 1000, unlock at 2023-08-23T15:59:24Z"
+    },
+    {
+      "step": 8,
+      "name": "tlock stanza",
+      "ok": true,
+      "detail": "round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971"
+    }
+  ]
+}
diff --git a/testdata/fixtures/format3_full_chunk.json b/testdata/fixtures/format3_full_chunk.json
new file mode 100644
index 0000000..366e5a0
--- /dev/null
+++ b/testdata/fixtures/format3_full_chunk.json
@@ -0,0 +1,152 @@
+{
+  "description": "format 3 time_only capsule with padding code 1 (bloque256) and one file, whose BODY and P are 65536 bytes: PAYLOAD_AGE ends in a full STREAM chunk, which the annex of spec v0.16 (79.5) allows",
+  "spec": "0.16",
+  "format": 3,
+  "file": "format3_full_chunk.dkc",
+  "sha256": "af658967b0b2c79379e25edfe3a785095e9aa2686203e93e9f30dacf27a38684",
+  "release": {
+    "round": 1000,
+    "signature": "b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"
+  },
+  "prelude": "444b43310300000000000079000001ca",
+  "public_header": "a5006a646174656b6579636170010102509c672412223e65667407568b2ffab62d037853646b315f65794a325a584a7a61573975496a6f784c434a755a58523362334a72496a6f695a4746305a57746c65584d3663585670593274755a585136646a45694c434a79623356755a4349364d5441774d48300400",
+  "datekey": "dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0",
+  "capsule_id": "9c672412223e65667407568b2ffab62d",
+  "access_policy": "time_only",
+  "structure": "time_only",
+  "unlock_at": "2023-08-23T15:59:24Z",
+  "header_binding": "ea2cd41f6216135cd349fceb1891772252e3f90ed945fc71fd73852a982fbf1f",
+  "outer_stanzas": [
+    {
+      "type": "tlock",
+      "args": [
+        "1000",
+        "52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971"
+      ]
+    }
+  ],
+  "payload_stanzas": [
+    {
+      "type": "X25519",
+      "args": [
+        "QsnJmO1LaffXIjpp0ms0Rh2IXta9VzX38GP6TMYlAHA"
+      ]
+    }
+  ],
+  "control_cbor": "a60070646174656b6579732d636f6e74726f6c0103025820ea2cd41f6216135cd349fceb1891772252e3f90ed945fc71fd73852a982fbf1f0358205be72d0295b21d37b6c8380a91d7c875a2dcab7257fa7ea44dcee5ae6280c95a064800000000000100000701",
+  "payload_identity": "5be72d0295b21d37b6c8380a91d7c875a2dcab7257fa7ea44dcee5ae6280c95a",
+  "payload_length": 65536,
+  "padding": 1,
+  "padded_length": 65536,
+  "plaintext_file": "format3_full_chunk.plaintext",
+  "plaintext_sha256": "ec5bfd307b2e36c1b8e232031167401a1f06d205ccade7a054d39914ebf5c9f8",
+  "area_len": 32768,
+  "security_cbor": "a20071646174656b6579732d73656375726974790101",
+  "head_cbor": "a4006d646174656b6579732d68656164010102582029068855227bf0d314be5b3b5e16392b7157581cf62b0c8d156f74017e2f19bf0581a6006a626c6f7175652e62696e01197f7d020003197f7d045820b84764fc9aa813643c9b76145bfdc87673a4b83ccb3cdfaa3c07bbbc5dba560d051a6abcf9c0",
+  "salt": "29068855227bf0d314be5b3b5e16392b7157581cf62b0c8d156f74017e2f19bf",
+  "content_offset": 32899,
+  "files": [
+    {
+      "path": "bloque.bin",
+      "size": 32637,
+      "start": 0,
+      "end": 32637,
+      "sha256": "b84764fc9aa813643c9b76145bfdc87673a4b83ccb3cdfaa3c07bbbc5dba560d",
+      "mtime": 1790769600
+    }
+  ],
+  "verdicts": {
+    "signature": "F0",
+    "seal": "S0",
+    "lines": [
+      "Sin firma de autor."
+    ]
+  },
+  "stages": [
+    {
+      "step": 1,
+      "name": "parse DKC1",
+      "ok": true
+    },
+    {
+      "step": 2,
+      "name": "prelude",
+      "ok": true
+    },
+    {
+      "step": 3,
+      "name": "public header",
+      "ok": true
+    },
+    {
+      "step": 4,
+      "name": "header validation",
+      "ok": true
+    },
+    {
+      "step": 5,
+      "name": "sealed control structure",
+      "ok": true
+    },
+    {
+      "step": 6,
+      "name": "payload structure",
+      "ok": true
+    },
+    {
+      "step": 7,
+      "name": "condition",
+      "ok": true
+    },
+    {
+      "step": 8,
+      "name": "tlock stanza",
+      "ok": true
+    },
+    {
+      "step": 9,
+      "name": "release",
+      "ok": true
+    },
+    {
+      "step": 10,
+      "name": "release verification",
+      "ok": true
+    },
+    {
+      "step": 11,
+      "name": "open sealed control",
+      "ok": true
+    },
+    {
+      "step": 12,
+      "name": "policy structure",
+      "ok": true
+    },
+    {
+      "step": 14,
+      "name": "control",
+      "ok": true
+    },
+    {
+      "step": 15,
+      "name": "header binding",
+      "ok": true
+    },
+    {
+      "step": 16,
+      "name": "payload identity",
+      "ok": true
+    },
+    {
+      "step": 17,
+      "name": "open payload",
+      "ok": true
+    },
+    {
+      "step": 18,
+      "name": "commit",
+      "ok": true
+    }
+  ]
+}
diff --git a/testdata/fixtures/format3_full_chunk.plaintext b/testdata/fixtures/format3_full_chunk.plaintext
new file mode 100644
index 0000000..043a785
Binary files /dev/null and b/testdata/fixtures/format3_full_chunk.plaintext differ
diff --git a/testdata/fixtures/format3_note.json b/testdata/fixtures/format3_note.json
index eecc6b8..4971931 100644
--- a/testdata/fixtures/format3_note.json
+++ b/testdata/fixtures/format3_note.json
@@ -1,6 +1,6 @@
 {
   "description": "format 3 time_only capsule with a single file, nota.txt, and the public note «Cartas del viaje a Lisboa» in the noncritical array of PUBLIC_HEADER (spec v0.11, §24.1)",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 3,
   "file": "format3_note.dkc",
   "sha256": "da1bee54231252a0fd98439e24588125c5521f6e5a2c6641b499e6b22192c0eb",
diff --git a/testdata/fixtures/format3_seal_unsupported.json b/testdata/fixtures/format3_seal_unsupported.json
index 175dc52..205f78b 100644
--- a/testdata/fixtures/format3_seal_unsupported.json
+++ b/testdata/fixtures/format3_seal_unsupported.json
@@ -1,6 +1,6 @@
 {
   "description": "format 3 time_only capsule with an author-signature of alg 4294967295, as in format3_signature_unsupported, and a seal of seal_type 4294967295, reserved for tests, with a random token of 32 bytes: verdicts F1 and S1",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 3,
   "file": "format3_seal_unsupported.dkc",
   "sha256": "ae3219fbdbd1de4cef6fade1a3fb3f6e5d5e2e8af54d9516b05f0a48136913ad",
diff --git a/testdata/fixtures/format3_sealed.json b/testdata/fixtures/format3_sealed.json
index 426ea0c..8833ef2 100644
--- a/testdata/fixtures/format3_sealed.json
+++ b/testdata/fixtures/format3_sealed.json
@@ -1,6 +1,6 @@
 {
   "description": "format 3 time_only capsule with a single file, nota.txt, signed with alg 1 by the test key of format3_signed and sealed with seal_type 2 by a test time-stamping authority before the round time: verdicts F4 and S4, with SEAL_SUBJECT and the token in the record",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 3,
   "file": "format3_sealed.dkc",
   "sha256": "dde5a072d8783227d28279d06d3d226a1fb967c766da626f889d1c6fd76ac9c7",
diff --git a/testdata/fixtures/format3_security_v2.json b/testdata/fixtures/format3_security_v2.json
index 97d2049..f7c2d8b 100644
--- a/testdata/fixtures/format3_security_v2.json
+++ b/testdata/fixtures/format3_security_v2.json
@@ -1,6 +1,6 @@
 {
   "description": "format 3 time_only capsule whose security is of version 2: verdict X",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 3,
   "file": "format3_security_v2.dkc",
   "sha256": "3d02b39ace010d74604554e378d22fe5ce00cecd998c0f797d657b17620b8912",
diff --git a/testdata/fixtures/format3_signature_unsupported.json b/testdata/fixtures/format3_signature_unsupported.json
index 66e88a3..5bdaa75 100644
--- a/testdata/fixtures/format3_signature_unsupported.json
+++ b/testdata/fixtures/format3_signature_unsupported.json
@@ -1,6 +1,6 @@
 {
   "description": "format 3 time_only capsule with an author-signature of alg 4294967295, a random key of 32 bytes and a random signature of 64: verdicts F1 and S0",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 3,
   "file": "format3_signature_unsupported.dkc",
   "sha256": "e8e3106d8d73bb7b845062e0fe42af21df7d7cd8f63c335cab8dedb3e690df31",
diff --git a/testdata/fixtures/format3_signed.json b/testdata/fixtures/format3_signed.json
index 11d09cd..3e018c0 100644
--- a/testdata/fixtures/format3_signed.json
+++ b/testdata/fixtures/format3_signed.json
@@ -1,6 +1,6 @@
 {
   "description": "format 3 time_only capsule with a single file, nota.txt, signed with alg 1 by a test key whose seed the record gives: verdict F4, and the commitments and the message of the signature",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 3,
   "file": "format3_signed.dkc",
   "sha256": "3c7d3c9e24c02853a0c7761b93bea1120b27fce396468d8d0f68e53aeb668c5e",
diff --git a/testdata/fixtures/format3_signed_cms.json b/testdata/fixtures/format3_signed_cms.json
index 2bcfc1f..e7c8d3c 100644
--- a/testdata/fixtures/format3_signed_cms.json
+++ b/testdata/fixtures/format3_signed_cms.json
@@ -1,6 +1,6 @@
 {
   "description": "format 3 time_only capsule with a single file, nota.txt, signed with alg 2 by two test certificates, an ECDSA P-256 one and an RSA 2048 one, each sealed by a test time-stamping authority before the round time: verdict F6, with the certificates, the commitments, SIGNERS and the result of each signer in the record",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 3,
   "file": "format3_signed_cms.dkc",
   "sha256": "d658f8d5ac2c5550c07b8f8fd6883b2f6dc02ceafc47d436ea02d8950b2548d2",
diff --git a/testdata/fixtures/format3_single.json b/testdata/fixtures/format3_single.json
index 25d7e9a..415b7a2 100644
--- a/testdata/fixtures/format3_single.json
+++ b/testdata/fixtures/format3_single.json
@@ -1,6 +1,6 @@
 {
   "description": "format 3 time_only capsule with a single file, nota.txt, with its mtime",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 3,
   "file": "format3_single.dkc",
   "sha256": "9f68664af8733255084be9036a100b75d27bd16106bf0acff94ce469dd1d1743",
diff --git a/testdata/fixtures/format3_time_and_key_portable.dkk.json b/testdata/fixtures/format3_time_and_key_portable.dkk.json
index 5c26b0b..73576c3 100644
--- a/testdata/fixtures/format3_time_and_key_portable.dkk.json
+++ b/testdata/fixtures/format3_time_and_key_portable.dkk.json
@@ -1,6 +1,6 @@
 {
   "description": "portable X25519 .dkk of format3_time_and_key_portable.dkc",
-  "spec": "0.15",
+  "spec": "0.16",
   "file": "format3_time_and_key_portable.dkk",
   "sha256": "54cc64d849395234b3e093e47f432b72781ccc13f455c9ef394e3554ab566751",
   "credential_id": "bdb483fba42daf0b409f44d23033f362",
diff --git a/testdata/fixtures/format3_time_and_key_portable.json b/testdata/fixtures/format3_time_and_key_portable.json
index aa07b87..b1bbcea 100644
--- a/testdata/fixtures/format3_time_and_key_portable.json
+++ b/testdata/fixtures/format3_time_and_key_portable.json
@@ -1,6 +1,6 @@
 {
   "description": "format 3 time_and_key capsule with one credential, a portable .dkk, and 15 dummies",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 3,
   "file": "format3_time_and_key_portable.dkc",
   "sha256": "680d29962e575689a31543df28433dae7737abd9a793e9cae92ef40920d09636",
diff --git a/testdata/fixtures/format3_time_and_key_words.dkc b/testdata/fixtures/format3_time_and_key_words.dkc
new file mode 100644
index 0000000..d79b21b
Binary files /dev/null and b/testdata/fixtures/format3_time_and_key_words.dkc differ
diff --git a/testdata/fixtures/format3_time_and_key_words.inspect.json b/testdata/fixtures/format3_time_and_key_words.inspect.json
new file mode 100644
index 0000000..ec388a9
--- /dev/null
+++ b/testdata/fixtures/format3_time_and_key_words.inspect.json
@@ -0,0 +1,61 @@
+{
+  "file": "format3_time_and_key_words.dkc",
+  "format": 3,
+  "capsule_id": "30e865a5c1e148c14410817a65eecfd1",
+  "datekey": "dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0",
+  "profile": "datekeys:quicknet:v1",
+  "round": 1000,
+  "unlock_at": "2023-08-23T15:59:24Z",
+  "access_policy": "time_and_key",
+  "valid": true,
+  "checks": [
+    {
+      "step": 1,
+      "name": "parse DKC1",
+      "ok": true,
+      "detail": "magic DKC1"
+    },
+    {
+      "step": 2,
+      "name": "prelude",
+      "ok": true,
+      "detail": "DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128"
+    },
+    {
+      "step": 3,
+      "name": "public header",
+      "ok": true,
+      "detail": "121 bytes"
+    },
+    {
+      "step": 4,
+      "name": "header validation",
+      "ok": true,
+      "detail": "capsule_id=30e865a5c1e148c14410817a65eecfd1 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1"
+    },
+    {
+      "step": 5,
+      "name": "sealed control structure",
+      "ok": true,
+      "detail": "one tlock stanza"
+    },
+    {
+      "step": 6,
+      "name": "payload structure",
+      "ok": true,
+      "detail": "one X25519 stanza"
+    },
+    {
+      "step": 7,
+      "name": "condition",
+      "ok": true,
+      "detail": "round 1000, unlock at 2023-08-23T15:59:24Z"
+    },
+    {
+      "step": 8,
+      "name": "tlock stanza",
+      "ok": true,
+      "detail": "round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971"
+    }
+  ]
+}
diff --git a/testdata/fixtures/format3_time_and_key_words.json b/testdata/fixtures/format3_time_and_key_words.json
new file mode 100644
index 0000000..35111b3
--- /dev/null
+++ b/testdata/fixtures/format3_time_and_key_words.json
@@ -0,0 +1,267 @@
+{
+  "description": "format 3 time_and_key capsule with one credential, a key of words, and 15 dummies: the text of the vector of the annex of spec v0.16 (79.7), «Ñandú», two spaces, «PINGÜINO», a tab and «camión árbol Éter ola», whose words are «nandu pinguino camion arbol eter ola»",
+  "spec": "0.16",
+  "format": 3,
+  "file": "format3_time_and_key_words.dkc",
+  "sha256": "64a11824630b6134892087a4d4ad3ee6e27941513507ad17fc87a7a2b4421e33",
+  "release": {
+    "round": 1000,
+    "signature": "b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"
+  },
+  "prelude": "444b4331030000000000007900000850",
+  "public_header": "a5006a646174656b65796361700101025030e865a5c1e148c14410817a65eecfd1037853646b315f65794a325a584a7a61573975496a6f784c434a755a58523362334a72496a6f695a4746305a57746c65584d3663585670593274755a585136646a45694c434a79623356755a4349364d5441774d48300401",
+  "datekey": "dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0",
+  "capsule_id": "30e865a5c1e148c14410817a65eecfd1",
+  "access_policy": "time_and_key",
+  "structure": "time_and_key",
+  "unlock_at": "2023-08-23T15:59:24Z",
+  "header_binding": "4bc6ecdcd80e37d0ed1f51ef781db6800564c309e222ba6151665ddd1fe4c99d",
+  "outer_stanzas": [
+    {
+      "type": "tlock",
+      "args": [
+        "1000",
+        "52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971"
+      ]
+    }
+  ],
+  "payload_stanzas": [
+    {
+      "type": "X25519",
+      "args": [
+        "y+DAEDO0p07P4YDE2pHXFhIpzVKiv+YUku15lbotTjM"
+      ]
+    }
+  ],
+  "inner_stanzas": [
+    {
+      "type": "X25519",
+      "args": [
+        "MSeAnfrz4I+Pn3yhL+/+hkNASJPwQzNQLxeiYu4YeBc"
+      ]
+    },
+    {
+      "type": "X25519",
+      "args": [
+        "5VwR2r6e5MknAz//TJrRNRYOtQOeqCaTDdJ+A8QV+S8"
+      ]
+    },
+    {
+      "type": "X25519",
+      "args": [
+        "X09hnKn4HOIFwf6H4GfJe3vSG5f5/EqDtV6Bx+OPgFY"
+      ]
+    },
+    {
+      "type": "X25519",
+      "args": [
+        "GhhTyyFwZItGXCDKsG3sIcDYJrD9QU45ybqQxjUQUQ4"
+      ]
+    },
+    {
+      "type": "X25519",
+      "args": [
+        "SS7ZyiY/U4O6PokUavgTMRMghx4lHDiJ+k+K/rsC8FU"
+      ]
+    },
+    {
+      "type": "X25519",
+      "args": [
+        "zchoCmsfxz/dR7YbYGOEoMkSjrDVzOLt5al0CprXG2E"
+      ]
+    },
+    {
+      "type": "X25519",
+      "args": [
+        "xg6iz12nCO/jm/rpa4k6aUM1mu2MUm7CwLJsF8qDwUA"
+      ]
+    },
+    {
+      "type": "X25519",
+      "args": [
+        "NfHtp8ATUtya6UcudC1FTfiL2SMfrKCFj8V3/slMfEw"
+      ]
+    },
+    {
+      "type": "X25519",
+      "args": [
+        "89gYRmkwISvkX1BNb/opcezkVOmNkj7mh89WkniGkWU"
+      ]
+    },
+    {
+      "type": "X25519",
+      "args": [
+        "yBQHKKHENrGZfD9qysIoZ/2sMcSXvKClt6VUL4Sx6Sc"
+      ]
+    },
+    {
+      "type": "X25519",
+      "args": [
+        "POtK0+b9IiRSRxlNBYm7DPzApiULuJaVWWOSHap4C00"
+      ]
+    },
+    {
+      "type": "X25519",
+      "args": [
+        "2dGTxtsPQRUHGAros0o30jqTpEa4+6d5KRt4U86Qx2o"
+      ]
+    },
+    {
+      "type": "X25519",
+      "args": [
+        "EKRbRpTDe5KZJgGgsfvnwb0iaHXkzVsqplsmCj3HzHY"
+      ]
+    },
+    {
+      "type": "X25519",
+      "args": [
+        "+wHShSAq5PhGXD9ZHs+AwjXxq0TRbcpXwjf46fwW1wc"
+      ]
+    },
+    {
+      "type": "X25519",
+      "args": [
+        "HRclh6xyQdsMOSV2MBP0ewe7JB+6EvgTod/4BOYXNAo"
+      ]
+    },
+    {
+      "type": "X25519",
+      "args": [
+        "ZIfAt94wDxyQ4Y3WWw54v7H55b26Ye19HFn7USqSwnE"
+      ]
+    }
+  ],
+  "identity_stanzas": [
+    1
+  ],
+  "identities": [
+    "AGE-SECRET-KEY-1CWYUF8E9RJ4SYWL8D7WN43M30XHFFFXD6LSZDRYS2WZ8CMUWWENSEXCGDP"
+  ],
+  "words_text": "Ñandú  PINGÜINO\tcamión árbol Éter ola",
+  "control_cbor": "a60070646174656b6579732d636f6e74726f6c01030258204bc6ecdcd80e37d0ed1f51ef781db6800564c309e222ba6151665ddd1fe4c99d035820a5f41e788e692ea55a3931bc5e25c7e6180ecc1d14235994198f8e00edb7420a064800000000000080b00702",
+  "payload_identity": "a5f41e788e692ea55a3931bc5e25c7e6180ecc1d14235994198f8e00edb7420a",
+  "payload_length": 32944,
+  "padding": 2,
+  "padded_length": 34816,
+  "plaintext_file": "format3_time_and_key_words.plaintext",
+  "plaintext_sha256": "2ff49df00ad9a37446c626be6d0353e94bd3bf41d73a6141e10f77b586abcb67",
+  "area_len": 32768,
+  "security_cbor": "a20071646174656b6579732d73656375726974790101",
+  "head_cbor": "a4006d646174656b6579732d686561640101025820702740f9850339d6907640e1de069200437bf8688288ed4cc735b37bd875eb260581a6006b7365637265746f2e74787401182e020003182e045820937492203d207d6fe36161b8696bf1f05b8b4cc56d855c44853f4b76aad3a05b051a6abcf9c0",
+  "salt": "702740f9850339d6907640e1de069200437bf8688288ed4cc735b37bd875eb26",
+  "content_offset": 32898,
+  "files": [
+    {
+      "path": "secreto.txt",
+      "size": 46,
+      "start": 0,
+      "end": 46,
+      "sha256": "937492203d207d6fe36161b8696bf1f05b8b4cc56d855c44853f4b76aad3a05b",
+      "mtime": 1790769600
+    }
+  ],
+  "verdicts": {
+    "signature": "F0",
+    "seal": "S0",
+    "lines": [
+      "Sin firma de autor."
+    ]
+  },
+  "stages": [
+    {
+      "step": 1,
+      "name": "parse DKC1",
+      "ok": true
+    },
+    {
+      "step": 2,
+      "name": "prelude",
+      "ok": true
+    },
+    {
+      "step": 3,
+      "name": "public header",
+      "ok": true
+    },
+    {
+      "step": 4,
+      "name": "header validation",
+      "ok": true
+    },
+    {
+      "step": 5,
+      "name": "sealed control structure",
+      "ok": true
+    },
+    {
+      "step": 6,
+      "name": "payload structure",
+      "ok": true
+    },
+    {
+      "step": 7,
+      "name": "condition",
+      "ok": true
+    },
+    {
+      "step": 8,
+      "name": "tlock stanza",
+      "ok": true
+    },
+    {
+      "step": 9,
+      "name": "access credential",
+      "ok": true
+    },
+    {
+      "step": 9,
+      "name": "release",
+      "ok": true
+    },
+    {
+      "step": 10,
+      "name": "release verification",
+      "ok": true
+    },
+    {
+      "step": 11,
+      "name": "open sealed control",
+      "ok": true
+    },
+    {
+      "step": 12,
+      "name": "policy structure",
+      "ok": true
+    },
+    {
+      "step": 13,
+      "name": "open access layer",
+      "ok": true
+    },
+    {
+      "step": 14,
+      "name": "control",
+      "ok": true
+    },
+    {
+      "step": 15,
+      "name": "header binding",
+      "ok": true
+    },
+    {
+      "step": 16,
+      "name": "payload identity",
+      "ok": true
+    },
+    {
+      "step": 17,
+      "name": "open payload",
+      "ok": true
+    },
+    {
+      "step": 18,
+      "name": "commit",
+      "ok": true
+    }
+  ]
+}
diff --git a/testdata/fixtures/format3_time_and_key_words.plaintext b/testdata/fixtures/format3_time_and_key_words.plaintext
new file mode 100644
index 0000000..96a5bf0
Binary files /dev/null and b/testdata/fixtures/format3_time_and_key_words.plaintext differ
diff --git a/testdata/fixtures/format3_tree.json b/testdata/fixtures/format3_tree.json
index 637af25..bd59c5f 100644
--- a/testdata/fixtures/format3_tree.json
+++ b/testdata/fixtures/format3_tree.json
@@ -1,6 +1,6 @@
 {
   "description": "format 3 time_only capsule with five files in three folders, one of them over two STREAM chunks and one without mtime, a comment of two lines and a declared author",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 3,
   "file": "format3_tree.dkc",
   "sha256": "217f378faaf795f6a9c416b564fb8931bb2e896918aee870120fd14f9a5da7d1",
diff --git a/testdata/fixtures/format3_unsigned.json b/testdata/fixtures/format3_unsigned.json
index 57c857a..3c3f74c 100644
--- a/testdata/fixtures/format3_unsigned.json
+++ b/testdata/fixtures/format3_unsigned.json
@@ -1,6 +1,6 @@
 {
   "description": "format 3 time_only capsule with a single file, nota.txt, as format3_signed, without a signature: the area of 32 KiB of spec v0.11 holds the empty security, and P is the one of format3_signed",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 3,
   "file": "format3_unsigned.dkc",
   "sha256": "317ab722ae3812a25ddd78b4c98c586363e5587c8d3634c881ce7c421af19168",
diff --git a/testdata/fixtures/time_and_key_portable.dkk.json b/testdata/fixtures/time_and_key_portable.dkk.json
index 3e1cff3..7e87941 100644
--- a/testdata/fixtures/time_and_key_portable.dkk.json
+++ b/testdata/fixtures/time_and_key_portable.dkk.json
@@ -1,6 +1,6 @@
 {
   "description": "portable X25519 .dkk of time_and_key_portable.dkc",
-  "spec": "0.15",
+  "spec": "0.16",
   "file": "time_and_key_portable.dkk",
   "sha256": "e528fa2c832c91119f0684bb9d6fb3c4c2d0d55183482890e7c4fe92f668426a",
   "credential_id": "3955e944a3c60cfa1fd6485e9693c77d",
diff --git a/testdata/fixtures/time_and_key_portable.json b/testdata/fixtures/time_and_key_portable.json
index c74b1db..6a61b6d 100644
--- a/testdata/fixtures/time_and_key_portable.json
+++ b/testdata/fixtures/time_and_key_portable.json
@@ -1,6 +1,6 @@
 {
   "description": "time_and_key capsule whose only recipient is a portable .dkk",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 1,
   "file": "time_and_key_portable.dkc",
   "sha256": "2e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972",
diff --git a/testdata/fixtures/time_and_key_portable_extension.dkk.json b/testdata/fixtures/time_and_key_portable_extension.dkk.json
index ff74e62..91ed929 100644
--- a/testdata/fixtures/time_and_key_portable_extension.dkk.json
+++ b/testdata/fixtures/time_and_key_portable_extension.dkk.json
@@ -1,6 +1,6 @@
 {
   "description": "portable X25519 .dkk of time_and_key_portable.dkc with a noncritical extension: the credential of time_and_key_portable.dkk re-issued with org.example.delivery",
-  "spec": "0.15",
+  "spec": "0.16",
   "file": "time_and_key_portable_extension.dkk",
   "sha256": "0bf463a7c65627b7dda2234d728df89ec5b835816a2a37b91497d8fecc5ea548",
   "credential_id": "3955e944a3c60cfa1fd6485e9693c77d",
diff --git a/testdata/fixtures/time_and_key_recipients.dkk.json b/testdata/fixtures/time_and_key_recipients.dkk.json
index 2c42bf8..800b3ab 100644
--- a/testdata/fixtures/time_and_key_recipients.dkk.json
+++ b/testdata/fixtures/time_and_key_recipients.dkk.json
@@ -1,6 +1,6 @@
 {
   "description": "portable X25519 .dkk of time_and_key_recipients.dkc",
-  "spec": "0.15",
+  "spec": "0.16",
   "file": "time_and_key_recipients.dkk",
   "sha256": "19f6c47150c3194712d454f43c7392b7344e6b4e7b074d83e9ca5f563a8e072f",
   "credential_id": "b89292aedf6d05d584cec9a871ce8735",
diff --git a/testdata/fixtures/time_and_key_recipients.json b/testdata/fixtures/time_and_key_recipients.json
index e30b5cf..83ca70d 100644
--- a/testdata/fixtures/time_and_key_recipients.json
+++ b/testdata/fixtures/time_and_key_recipients.json
@@ -1,6 +1,6 @@
 {
   "description": "time_and_key capsule for two known X25519 recipients and a portable .dkk",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 1,
   "file": "time_and_key_recipients.dkc",
   "sha256": "69ac110380f5d768b5b6afaa157a50ed17d8ceccfbd4604ffa5b6da38539b635",
diff --git a/testdata/fixtures/time_only.json b/testdata/fixtures/time_only.json
index 8279e55..db3c257 100644
--- a/testdata/fixtures/time_only.json
+++ b/testdata/fixtures/time_only.json
@@ -1,6 +1,6 @@
 {
   "description": "time_only capsule, two STREAM chunks, no extensions",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 1,
   "file": "time_only.dkc",
   "sha256": "99e915810d595f1092700b728f5e5081d78efe83f5343e76325b1bcc2c33ccf2",
diff --git a/testdata/fixtures/time_only_extensions.json b/testdata/fixtures/time_only_extensions.json
index ec3ae30..04fb864 100644
--- a/testdata/fixtures/time_only_extensions.json
+++ b/testdata/fixtures/time_only_extensions.json
@@ -1,6 +1,6 @@
 {
   "description": "time_only capsule with a noncritical PUBLIC_HEADER extension and a noncritical CONTROL_CBOR extension",
-  "spec": "0.15",
+  "spec": "0.16",
   "format": 1,
   "file": "time_only_extensions.dkc",
   "sha256": "0446c9b73e267adcb24e5cc89afba2544a386ec9a050016e06517a4a57aa2085",
diff --git a/testdata/vectors/cbor.json b/testdata/vectors/cbor.json
index 6966756..1e80a95 100644
--- a/testdata/vectors/cbor.json
+++ b/testdata/vectors/cbor.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "CBOR profile of spec §58 and the schemas of spec/datekeys.cddl, generated by the reference implementation. accept and reject are walked as one data item of the profile with the limits of walk; schemas are decoded with the decoder of their schema. See testdata/README.md.",
   "walk": {
     "max_depth": 3,
diff --git a/testdata/vectors/dk1.json b/testdata/vectors/dk1.json
index c6a025b..69766f2 100644
--- a/testdata/vectors/dk1.json
+++ b/testdata/vectors/dk1.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "Canonical dk1_ strings and rejected encodings (spec §18, §19, §66), generated by the reference implementation.",
   "vectors": [
     {
diff --git a/testdata/vectors/ed25519_strict.json b/testdata/vectors/ed25519_strict.json
index 36c1e50..22b8251 100644
--- a/testdata/vectors/ed25519_strict.json
+++ b/testdata/vectors/ed25519_strict.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "Ed25519 signatures and the result of the strict profile of the author signature (spec v0.11, §29.9), after the cases of «Taming the many EdDSAs»; stdlib is the result of crypto/ed25519 of Go, for the record. Generated by the reference implementation. See testdata/README.md.",
   "vectors": [
     {
diff --git a/testdata/vectors/head_schema.json b/testdata/vectors/head_schema.json
index 42e5899..2af3c5d 100644
--- a/testdata/vectors/head_schema.json
+++ b/testdata/vectors/head_schema.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "HEAD_CBOR of format 3 (spec §29.4 to §29.6) and the result of decoding it with no extension known, generated by the reference implementation: layer 2 (type tag and version), layer 3 (the CDDL with R1 and R8), then layer 4 in key order (spec §69.1). See testdata/README.md.",
   "heads": [
     {
diff --git a/testdata/vectors/inspect_differential.json b/testdata/vectors/inspect_differential.json
index fac3c9d..d72094b 100644
--- a/testdata/vectors/inspect_differential.json
+++ b/testdata/vectors/inspect_differential.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "Differential corpus of the pre-unlock checks (spec §63 steps 1 to 8): deterministic mutations of the official .dkc fixtures with the verdict of the reference implementation. See testdata/README.md.",
   "format": "Each mutation is bases[base].file (in testdata/fixtures) with its edits applied. An edit is [at, delete, insert]: the delete bytes at offset at of the base are replaced by the bytes of the hex string insert. The edits of one mutation refer to offsets of the unmodified base, are sorted by offset and do not overlap. result is the verdict of steps 1 to 8 of spec §63 (capsule.Inspect, the Quicknet profile pinned, no extension known, no network, no secret): ok, or the normative error code, with step the step that failed. kind names the generator of the mutation and is informative.",
   "seed": 20260925,
diff --git a/testdata/vectors/locator.json b/testdata/vectors/locator.json
index 7d59b64..745bc73 100644
--- a/testdata/vectors/locator.json
+++ b/testdata/vectors/locator.json
@@ -1,6 +1,6 @@
 {
   "description": "The extension datekeys.capsule of a .dkk and what it points to (spec v0.12, 44.1): an envelope of age with its header apart from its rest, the rest hidden in a host file, the locator sealed with tlock for round 1000, and the data of the extension. On the same envelope, what a reader rejects and what it uses (64): addresses, a locator with rejected and usable addresses, resources of the rest, data of the extension and plaintexts of the locator. Frozen. See testdata/README.md.",
-  "spec": "0.15",
+  "spec": "0.16",
   "round": 1000,
   "datekey": "dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0",
   "note": "Cartas del viaje a Lisboa",
diff --git a/testdata/vectors/mutations.json b/testdata/vectors/mutations.json
index 7984317..acb565d 100644
--- a/testdata/vectors/mutations.json
+++ b/testdata/vectors/mutations.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "Mutation corpus of spec §64 and further cases of capsule.TestMutationCorpus, generated by the reference implementation: each case is a .dkc and what the reader is given, with the normative error and the step of spec §63 at which capsule.Open fails. See testdata/README.md.",
   "cases": [
     {
diff --git a/testdata/vectors/note.json b/testdata/vectors/note.json
index 7e795dc..3df6c05 100644
--- a/testdata/vectors/note.json
+++ b/testdata/vectors/note.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "The data of the public note, datekeys.note version 1 in the noncritical array of PUBLIC_HEADER (spec §24.1): the text in UTF-8, from 1 to 1024 bytes, that meets the rules of the declared author of §29.6. See testdata/README.md.",
   "notes": [
     {
diff --git a/testdata/vectors/padding.json b/testdata/vectors/padding.json
index ad8da11..3ac3c80 100644
--- a/testdata/vectors/padding.json
+++ b/testdata/vectors/padding.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "Padding rules of the payload of a format 2 capsule (spec §29.1): for each content length L, P with code 1 (bloque256) and code 2 (reforzado), and the length of PAYLOAD_AGE for each. e, s and last_bits are informative. Generated by the reference implementation. See testdata/README.md.",
   "l_max": 8936830510563328,
   "vectors": [
diff --git a/testdata/vectors/path_fold.json b/testdata/vectors/path_fold.json
index fc99fdd..f0c8a1f 100644
--- a/testdata/vectors/path_fold.json
+++ b/testdata/vectors/path_fold.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "The key of R7 (spec §29.5) of segments, with the Unicode 18.0.0 tables of §29.5.1, generated by the reference implementation: nfd is NFD(segment) and key is NFD(fold(NFD(s'))), s' the segment without ZWNJ, ZWJ, VS15 and VS16. See testdata/README.md.",
   "unicode_version": "18.0.0",
   "tables_digest": "07cf5d54aea1cd13a3ecef14a06976cc49a3cdad755cf9bc10395178b93aeb07",
diff --git a/testdata/vectors/paths.json b/testdata/vectors/paths.json
index 9c61ec4..f94a7ef 100644
--- a/testdata/vectors/paths.json
+++ b/testdata/vectors/paths.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "Paths of a format 3 head (spec §29.5) with the Unicode 18.0.0 and best-fit tables of §29.5.1, generated by the reference implementation. paths: one path and the rules of one entry, R2 to R6c and R10; trees: the paths of a head, of 0 bytes each, and the result of decoding it. See testdata/README.md.",
   "unicode_version": "18.0.0",
   "tables_digest": "07cf5d54aea1cd13a3ecef14a06976cc49a3cdad755cf9bc10395178b93aeb07",
diff --git a/testdata/vectors/profile_quicknet.json b/testdata/vectors/profile_quicknet.json
index c14e804..d9c7891 100644
--- a/testdata/vectors/profile_quicknet.json
+++ b/testdata/vectors/profile_quicknet.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "Quicknet Provider Profile V1: exact Deterministic CBOR and profile_hash (spec §11, §12, §75 item 2), generated by the reference implementation.",
   "profile_id": "datekeys:quicknet:v1",
   "provider": "drand",
diff --git a/testdata/vectors/quicknet_rounds.json b/testdata/vectors/quicknet_rounds.json
index 78a03be..d0f9657 100644
--- a/testdata/vectors/quicknet_rounds.json
+++ b/testdata/vectors/quicknet_rounds.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "profile": "datekeys:quicknet:v1",
   "description": "Quicknet date to round resolution (spec §15, §16, §65), generated by the reference implementation.",
   "vectors": [
diff --git a/testdata/vectors/release.json b/testdata/vectors/release.json
index f41bb1b..a219e0b 100644
--- a/testdata/vectors/release.json
+++ b/testdata/vectors/release.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "The release object (spec v0.15, §47.1), and drand's JSON as the input of the caller, each checked against the pinned Quicknet profile and the round of a DateKey as step 10 of spec §63 checks a release that the caller supplies; and the lookups of a local release archive (spec v0.15, §50). See testdata/README.md.",
   "profile": "datekeys:quicknet:v1",
   "objects": [
@@ -432,6 +432,204 @@
       },
       "result": "ERR_RELEASE_INVALID",
       "text": "provider: the signature is not a canonical point encoding, or does not verify as the BLS signature of round 1000 under datekeys:quicknet:v1: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "round twice",
+      "input": "{\"round\":1000,\"round\":1001,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "round twice, once escaped as round",
+      "input": "{\"round\":1000,\"round\":1000,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "round twice, the second null",
+      "input": "{\"round\":1000,\"round\":null,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "round escaped as round",
+      "input": "{\"round\":1000,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "release": {
+        "round": 1000,
+        "signature": "b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"
+      },
+      "result": "ok"
+    },
+    {
+      "name": "Round instead of round",
+      "input": "{\"Round\":1000,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "ROUND beside round: another name, ignored",
+      "input": "{\"round\":1000,\"ROUND\":1001,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "release": {
+        "round": 1000,
+        "signature": "b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"
+      },
+      "result": "ok"
+    },
+    {
+      "name": "round null",
+      "input": "{\"round\":null,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "round 1000.0",
+      "input": "{\"round\":1000.0,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "round 1e3",
+      "input": "{\"round\":1e3,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "round -1000",
+      "input": "{\"round\":-1000,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "round 0",
+      "input": "{\"round\":0,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "round 2^53",
+      "input": "{\"round\":9007199254740992,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "round 2^53 - 1 for a DateKey of round 1000",
+      "input": "{\"round\":9007199254740991,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "release": {
+        "round": 9007199254740991,
+        "signature": "b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"
+      },
+      "result": "ERR_ROUND_MISMATCH",
+      "text": "provider: release for round 9007199254740991, expected 1000: ERR_ROUND_MISMATCH"
+    },
+    {
+      "name": "round with a leading zero",
+      "input": "{\"round\":01000,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "signature twice",
+      "input": "{\"round\":1000,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\",\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "signature null",
+      "input": "{\"round\":1000,\"signature\":null}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "randomness empty",
+      "input": "{\"round\":1000,\"randomness\":\"\",\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: randomness does not match the signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "randomness null",
+      "input": "{\"round\":1000,\"randomness\":null,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "another name twice",
+      "input": "{\"round\":1000,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\",\"note\":1,\"note\":2}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "a name twice in a nested object",
+      "input": "{\"round\":1000,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\",\"meta\":{\"a\":1,\"a\":2}}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "nested objects and arrays, ignored",
+      "input": "{\"round\":1000,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\",\"meta\":{\"a\":[1,{\"a\":2}],\"b\":{},\"c\":[]}}",
+      "round": 1000,
+      "release": {
+        "round": 1000,
+        "signature": "b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"
+      },
+      "result": "ok"
+    },
+    {
+      "name": "a lone surrogate in another name",
+      "input": "{\"round\":1000,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\",\"\\ud800\":1}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "a lone low surrogate in a value",
+      "input": "{\"round\":1000,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\",\"note\":\"\\udc00\"}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "a surrogate pair in a value",
+      "input": "{\"round\":1000,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\",\"note\":\"😀\"}",
+      "round": 1000,
+      "release": {
+        "round": 1000,
+        "signature": "b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"
+      },
+      "result": "ok"
+    },
+    {
+      "name": "a tab inside a string",
+      "input": "{\"round\":1000,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\",\"note\":\"a\tb\"}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
+    },
+    {
+      "name": "something after the object",
+      "input": "{\"round\":1000,\"signature\":\"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39\"}{}",
+      "round": 1000,
+      "result": "ERR_RELEASE_INVALID",
+      "text": "provider: drand JSON: malformed, or without round or signature: ERR_RELEASE_INVALID"
     }
   ],
   "archive": {
diff --git a/testdata/vectors/resolved_ip.json b/testdata/vectors/resolved_ip.json
index 55e2a31..5209fc8 100644
--- a/testdata/vectors/resolved_ip.json
+++ b/testdata/vectors/resolved_ip.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "The IP address that the name of an https address of a locator resolves to, and whether a reader may connect (spec v0.13, 44.1): a public address, or an address of NAT64 (RFC 6052) of 64:ff9b::/96 or of the NAT64 prefix of the network, whose IPv4 address inside is public. See testdata/README.md.",
   "cases": [
     {
diff --git a/testdata/vectors/security.json b/testdata/vectors/security.json
index 78e8956..09a3ea2 100644
--- a/testdata/vectors/security.json
+++ b/testdata/vectors/security.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "SECURITY_CBOR of format 3, exactly its SECURITY_LEN bytes, the verdicts of the signature and of the seal in the context of the file, and their lines (spec §29.3, §29.7, §29.9). See testdata/README.md.",
   "context": {
     "control_commit": "0101010101010101010101010101010101010101010101010101010101010101",
diff --git a/testdata/vectors/security_cms.json b/testdata/vectors/security_cms.json
index 10c32ba..d683163 100644
--- a/testdata/vectors/security_cms.json
+++ b/testdata/vectors/security_cms.json
@@ -1,10 +1,10 @@
 {
-  "description": "SECURITY_CBOR with an author signature of alg 2 or a time seal of seal_type 2, the context of its capsule, and the verdicts, the result of each signer and the lines of spec v0.12 29.7, 29.10 and 29.11. Certificates and tokens are made once with test keys and the file is frozen. See testdata/README.md.",
-  "spec": "0.15",
+  "description": "SECURITY_CBOR with an author signature of alg 2 or a time seal of seal_type 2, the context of its capsule, and the verdicts, the result of each signer and the lines of spec v0.16 29.7, 29.10 and 29.11. Certificates and tokens are made once with test keys and the file is frozen. See testdata/README.md.",
+  "spec": "0.16",
   "cases": [
     {
       "name": "alg 2: two signers, each sealed before the round time: F6",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -14,30 +14,30 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "Ana López",
-          "issuer": "Ana López",
+          "holder": "Luis Gómez",
+          "issuer": "Luis Gómez",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         },
         {
-          "holder": "Luis Gómez",
-          "issuer": "Luis Gómez",
+          "holder": "Ana López",
+          "issuer": "Ana López",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         }
       ],
       "lines": [
-        "Firmado con un certificado a nombre de «Ana López», «Luis Gómez». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «Ana López» (emisor según su certificado: «Ana López»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "Firmado con un certificado a nombre de «Luis Gómez», «Ana López». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
         "  «Luis Gómez» (emisor según su certificado: «Luis Gómez»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "  «Ana López» (emisor según su certificado: «Ana López»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  DateKeys no comprueba quién emitió los sellos."
       ]
     },
     {
       "name": "alg 2: sealed after the round time: F6, not before the opening date",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -51,17 +51,18 @@
           "issuer": "Ana López",
           "result": "valid",
           "seal_time": "2030-01-01T01:00:00Z",
-          "before_round_time": false
+          "before_round_time": false,
+          "seal_reason": "late"
         }
       ],
       "lines": [
         "Firmado con un certificado a nombre de «Ana López». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «Ana López» (emisor según su certificado: «Ana López»), sellado por «Autoridad de Sellado de prueba» el 2030-01-01T01:00:00Z, no antes de la fecha de apertura."
+        "  «Ana López» (emisor según su certificado: «Ana López»), sellado por «Autoridad de Sellado de prueba» el 2030-01-01T01:00:00Z, sin acreditar que fuera antes de la fecha de apertura: se selló después de esa fecha o demasiado cerca de ella."
       ]
     },
     {
       "name": "alg 2: t plus the accuracy of the seal equals the round time: F6, not before the opening date",
-      "security_cbor": "a30071646174656b6579732d73656375726974790101025906aea3000201582381582084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d31025906813082067d06092a864886f70d010702a082066e3082066a020101310d300b0609608648016503040201300b06092a864886f70d010701a082017c308201783082011da003020102020817a4eee96b02780c300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d03010703420004a986a8fbf38687cc9b33e317826adfdbde8cebce8b371ad4446ed8944fb8fb4a25b13681b8f490136711d5b55946c8b64abd13ae5a1d26ec639cc89e54c64d89a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100b568dd629e42e98beddd33b9299d2efb83b47caba7969276dcbacb5441b67dcd022100d5887a4ac170180c9c5fbf0a02c76970730853b2fbe880659ac1f96dccbaea4c318204c7308204c30201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a020817a4eee96b02780c300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420e5346b7763a20d80f7a0ae67d5f32387359677d0dad91e56f0e86d45668d7a4c3037060b2a864886f70d010910022f3128302630243022042084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d31300a06082a8648ce3d040302044830460221009fbefa9d8e1c5f13960f41c1153c7ec458462d96787c66cf3455a32fc1e050d6022100fa62539eeaa797568a7dfa6f39f670d51628e9a7f62cc7b1b925a430d3fe2fcea182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420e9c6c85e87da589abfc28382eaef7d4f2645728833e187466ba82f66b3f6faf002012a180f32303239313233313233353935395a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420fcc65d864f7ab71ba20c004dcef24a9fd3527d38d9e944fdde2c578bb4b9acfa300a06082a8648ce3d04030204463044022074051f1b87bff6c5edb10d0bbf7d13b831bcf97abbc85710565a13801432e603022035ec40364c4e81671977cd57e8e4b37d6474dd23b85fb082451fbc52319569dd",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -75,17 +76,68 @@
           "issuer": "Ana López",
           "result": "valid",
           "seal_time": "2029-12-31T23:59:59Z",
-          "before_round_time": false
+          "before_round_time": false,
+          "seal_reason": "late"
+        }
+      ],
+      "lines": [
+        "Firmado con un certificado a nombre de «Ana López». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
+        "  «Ana López» (emisor según su certificado: «Ana López»), sellado por «Autoridad de Sellado de prueba» el 2029-12-31T23:59:59Z, sin acreditar que fuera antes de la fecha de apertura: se selló después de esa fecha o demasiado cerca de ella."
+      ]
+    },
+    {
+      "name": "alg 2: a seal without accuracy: F6, not proven before the opening date",
+      "security_cbor": "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",
+      "context": {
+        "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
+        "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
+        "round_time": "2030-01-01T00:00:00Z"
+      },
+      "signature": "F6",
+      "seal": "S0",
+      "signers": [
+        {
+          "holder": "Ana López",
+          "issuer": "Ana López",
+          "result": "valid",
+          "seal_time": "2026-09-30T12:00:00Z",
+          "before_round_time": false,
+          "seal_reason": "no accuracy"
+        }
+      ],
+      "lines": [
+        "Firmado con un certificado a nombre de «Ana López». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
+        "  «Ana López» (emisor según su certificado: «Ana López»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, sin acreditar que fuera antes de la fecha de apertura: el sello no dice su precisión."
+      ]
+    },
+    {
+      "name": "alg 2: a seal of the BTSP policy without accuracy: F6, not proven before the opening date, by its policy",
+      "security_cbor": "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",
+      "context": {
+        "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
+        "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
+        "round_time": "2030-01-01T00:00:00Z"
+      },
+      "signature": "F6",
+      "seal": "S0",
+      "signers": [
+        {
+          "holder": "Ana López",
+          "issuer": "Ana López",
+          "result": "valid",
+          "seal_time": "2026-09-30T12:00:00Z",
+          "before_round_time": false,
+          "seal_reason": "no accuracy, BTSP"
         }
       ],
       "lines": [
         "Firmado con un certificado a nombre de «Ana López». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «Ana López» (emisor según su certificado: «Ana López»), sellado por «Autoridad de Sellado de prueba» el 2029-12-31T23:59:59Z, no antes de la fecha de apertura."
+        "  «Ana López» (emisor según su certificado: «Ana López»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, sin acreditar que fuera antes de la fecha de apertura: el sello no dice la precisión que exige su política."
       ]
     },
     {
       "name": "alg 2: a signer who is not required shows apart and does not count: F6",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -120,7 +172,7 @@
     },
     {
       "name": "alg 2: a required signer is absent: F5",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -129,18 +181,18 @@
       "signature": "F5",
       "seal": "S0",
       "signers": [
+        {
+          "holder": "7fba28a1f26f9d52a50dcd705e32f5f57d5a8979adc3ef96517d4e93f2c6bbb2",
+          "issuer": "",
+          "result": "absent",
+          "before_round_time": false
+        },
         {
           "holder": "Ana López",
           "issuer": "Ana López",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
-        },
-        {
-          "holder": "a7c9f84f9e93ea8c9e935b30dde117eb76471da44f7e45f2696c393f614e86ba",
-          "issuer": "",
-          "result": "absent",
-          "before_round_time": false
         }
       ],
       "lines": [
@@ -149,7 +201,7 @@
     },
     {
       "name": "alg 2: the author withdrawn and the co-signer intact: F5",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -158,18 +210,18 @@
       "signature": "F5",
       "seal": "S0",
       "signers": [
-        {
-          "holder": "84476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d31",
-          "issuer": "",
-          "result": "absent",
-          "before_round_time": false
-        },
         {
           "holder": "Luis Gómez",
           "issuer": "Luis Gómez",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
+        },
+        {
+          "holder": "9ad39cd4be9d81bd644342babe25139768ace72112dc39ce0932522298245338",
+          "issuer": "",
+          "result": "absent",
+          "before_round_time": false
         }
       ],
       "lines": [
@@ -178,7 +230,7 @@
     },
     {
       "name": "alg 2: a signature withdrawn and SIGNERS changed to hide it: F2",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -200,7 +252,7 @@
     },
     {
       "name": "alg 2: the CAdES-T of a signer withdrawn: F5, without seal",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -209,18 +261,18 @@
       "signature": "F5",
       "seal": "S0",
       "signers": [
+        {
+          "holder": "Luis Gómez",
+          "issuer": "Luis Gómez",
+          "result": "without seal",
+          "before_round_time": false
+        },
         {
           "holder": "Ana López",
           "issuer": "Ana López",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
-        },
-        {
-          "holder": "Luis Gómez",
-          "issuer": "Luis Gómez",
-          "result": "without seal",
-          "before_round_time": false
         }
       ],
       "lines": [
@@ -229,7 +281,7 @@
     },
     {
       "name": "alg 2: no seal: F5",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -251,7 +303,7 @@
     },
     {
       "name": "alg 2: the certificate of the signer out of validity, its authority valid: F5, out of validity",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -273,7 +325,7 @@
     },
     {
       "name": "alg 2: sealed at the last second of the validity of the certificate: F6",
-      "security_cbor": "a30071646174656b6579732d73656375726974790101025906afa30002015823815820c829a4fb3e275ec523b077a30166218c91ae33b64bae31e06cd75581b8b303ea025906823082067e06092a864886f70d010702a082066f3082066b020101310d300b0609608648016503040201300b06092a864886f70d010701a082017c3082017830820120a003020102020808b61e76b6282925300a06082a8648ce3d040302302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b457661204d617274c3ad6e301e170d3230303130313030303030305a170d3236303933303132303030305a302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b457661204d617274c3ad6e3059301306072a8648ce3d020106082a8648ce3d03010703420004ba4f00ddeb37505f913aee65dd41a0b52f03fd04e48c863c1025201f9ea69977ce203f0882e50601e63ed3328c1c06327404974ef09cb6c6eb3fa5ece43d243fa3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b457661204d617274c3ad6e300a06082a8648ce3d0403020346003043022073010554d364487e6b2045884405b42c0d96d5424387afb541f9168df74066e7021f406290902008a78e1bdbdc6e2eff0e6bfc08322f36c38eaf43519868f285ab318204c8308204c4020101303a302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b457661204d617274c3ad6e020808b61e76b6282925300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420a0a86154a9d80345b429b28feef0086bbd95abd3caf621026697dd52f0a5c8cb3037060b2a864886f70d010910022f31283026302430220420c829a4fb3e275ec523b077a30166218c91ae33b64bae31e06cd75581b8b303ea300a06082a8648ce3d040302044730450220601e4bb15d4754572f897a9cd9a56160597e2feceae2a1497409737f05590d8f022100ab988f365a4a9244c8c6a7e9f9844f49b27299750cafdc173a8624e42e8326e4a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042066a7ce3974632838d4a3caf170d4ac547d8c7a0388b7a917bab4f1b679ceafab02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420d908913f693398ca68aa9a2df2a5ee3ec335b282b22e3a508496f11e29eb5be9300a06082a8648ce3d0403020447304502206679aaac5d688393ee91b987e9db1f1dc8035480fd881fbb1366c51119b1718e022100a82a5ed72f4defd55a2df3b9e897904ac30e3734273ffe5a0243d4434466df6a",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -298,7 +350,7 @@
     },
     {
       "name": "alg 2: a seal whose authority was not valid at its time: F5, invalid seal",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d73656375726974790101025906a9a300020158238158209ad39cd4be9d81bd644342babe25139768ace72112dc39ce09325222982453380259067c3082067806092a864886f70d010702a082066930820665020101310d300b0609608648016503040201300b06092a864886f70d010701a082017c308201783082011da0030201020208209c9a20b2fc65a8300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d030107034200046e9d1e98fd5761abb9165bdbfc2247b845f41a33ffc9d342b95f80a171f9a03b5496a17e60ae5d4e86d76bfc0e95dc0e21a8cda9f95b6d06df405fb278f16c11a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100d45ccb171e519a71a8ee79c53b7a7f3d29bfb00099341a8ddd51735ec32cde44022100a5244a460235a9a27d2b7c891f41f9a589a9a5b19bd407ff32312897523fa4db318204c2308204be0201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a0208209c9a20b2fc65a8300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420a38a0abc0eb4a329ca8c9f06767e8183cfa1c159af7fb5022a50a1038535aa4a3037060b2a864886f70d010910022f312830263024302204209ad39cd4be9d81bd644342babe25139768ace72112dc39ce0932522298245338300a06082a8648ce3d0403020446304402206241d01af43003f6b4e9a1d22329192b6b2ad5eb1c5e78742b1260d98776a44502203359b06cf6b5148191c29a217cce208483a4a5e20feb33e8588b8c8a403448e9a182039430820390060b2a864886f70d010910020e3182037f3082037b06092a864886f70d010702a082036c30820368020101310d300b06096086480165030402013060060b2a864886f70d0109100104a051044f304d02010106032a0304302f300b0609608648016503040201042084e104599e945992b9d12cc86f2732f1385b5d5e277e235f28b103a2c6b4a37e02012a180f32303139303130313030303030305aa08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d01090431220420e81915e0919394b85dc00c21d67ef7ace169219a126a397e7a306e84135618f9300a06082a8648ce3d04030204483046022100da74cbda82f99726f96eff9259c0d8f20324507a5f17a36158f10bc8a90add5a022100a32117fd69dc2c68680435dbce4123ecd1f810596a337d1ea344ed22dbdaf4b7",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -320,7 +372,7 @@
     },
     {
       "name": "alg 2: a seal over another signature value: F5, invalid seal",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -342,7 +394,7 @@
     },
     {
       "name": "alg 2: a seal of a TSTInfo of version 2: F5, invalid seal",
-      "security_cbor": "a30071646174656b6579732d73656375726974790101025906aaa3000201582381582084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d310259067d3082067906092a864886f70d010702a082066a30820666020101310d300b0609608648016503040201300b06092a864886f70d010701a082017c308201783082011da003020102020817a4eee96b02780c300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d03010703420004a986a8fbf38687cc9b33e317826adfdbde8cebce8b371ad4446ed8944fb8fb4a25b13681b8f490136711d5b55946c8b64abd13ae5a1d26ec639cc89e54c64d89a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100b568dd629e42e98beddd33b9299d2efb83b47caba7969276dcbacb5441b67dcd022100d5887a4ac170180c9c5fbf0a02c76970730853b2fbe880659ac1f96dccbaea4c318204c3308204bf0201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a020817a4eee96b02780c300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420e5346b7763a20d80f7a0ae67d5f32387359677d0dad91e56f0e86d45668d7a4c3037060b2a864886f70d010910022f3128302630243022042084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d31300a06082a8648ce3d04030204483046022100f48d2a25865b7f1299b4ae346635d3020070f82fa2a585392c0924252eefb101022100bc1533f89ba4137f96b5e7b1cd3078df0a7ccd0c235a79a0479ac14517b6c0bca18203933082038f060b2a864886f70d010910020e3182037e3082037a06092a864886f70d010702a082036b30820367020101310d300b06096086480165030402013060060b2a864886f70d0109100104a051044f304d02010206032a0304302f300b06096086480165030402010420daf37bbd6801e911ac5d5c96a53b661e35ef0f17ffef315bc0a4802b47a826a102012a180f32303236303933303132303030305aa08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420e73015b126aa18e757e94dd1b1f62398dda9f7c644c14b4725619d3e49cd3ec0300a06082a8648ce3d04030204473045022100f47abbbe015718cae2bde2d64bb5e1d5f617b2b6bc0be740b5eb62ddc3779cfc02204b9eefd49c3d7c6fc9b0c912f81f05c6b03bf280a19275fae2aec4b194d071a6",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -364,7 +416,7 @@
     },
     {
       "name": "alg 2: a seal by an authority with a key of 1024 bits: F5, invalid seal",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -386,7 +438,7 @@
     },
     {
       "name": "alg 2: a seal with an imprint of SHA-384: F6",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d73656375726974790101025906bfa300020158238158209ad39cd4be9d81bd644342babe25139768ace72112dc39ce0932522298245338025906923082068e06092a864886f70d010702a082067f3082067b020101310d300b0609608648016503040201300b06092a864886f70d010701a082017c308201783082011da0030201020208209c9a20b2fc65a8300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d030107034200046e9d1e98fd5761abb9165bdbfc2247b845f41a33ffc9d342b95f80a171f9a03b5496a17e60ae5d4e86d76bfc0e95dc0e21a8cda9f95b6d06df405fb278f16c11a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100d45ccb171e519a71a8ee79c53b7a7f3d29bfb00099341a8ddd51735ec32cde44022100a5244a460235a9a27d2b7c891f41f9a589a9a5b19bd407ff32312897523fa4db318204d8308204d40201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a0208209c9a20b2fc65a8300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420a38a0abc0eb4a329ca8c9f06767e8183cfa1c159af7fb5022a50a1038535aa4a3037060b2a864886f70d010910022f312830263024302204209ad39cd4be9d81bd644342babe25139768ace72112dc39ce0932522298245338300a06082a8648ce3d040302044830460221009d195d2ed2aabd210852913ffb06e05c4350df8a7471badfd38e83a211b38cff022100ca1a7d57721dded4a69993c874ae50fccfc075d38cea4283abc87df241fccb47a18203a8308203a4060b2a864886f70d010910020e318203933082038f06092a864886f70d010702a08203803082037c020101310d300b06096086480165030402013075060b2a864886f70d0109100104a0660464306202010106032a0304303f300b060960864801650304020204307d8785833c04a905c1bc31f136a0b9e3f1d1bb78d563e97a20f93275189347ddfdc28f0d32f2c8ce5b9b4ce4e996570302012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d01090431220420b42786ae4c8b226ce9518d0761bd6e755a23b2001a00b096dddefa1500630039300a06082a8648ce3d040302044730450220337286cbc8348382fbc8e74ab4e8b7c6c8dcac1a6a2366d0d010be72e7dc2d6a0221009d390880582aff86339b093a5dd76b5dfc2f1e45fc1006f01ee62c89f177832f",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -411,7 +463,7 @@
     },
     {
       "name": "alg 2: a seal in BER makes the signature not DER: F1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -425,7 +477,7 @@
     },
     {
       "name": "alg 2: a key 3 of seal_type 4294967295 beside it: F5 and S1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -449,7 +501,7 @@
     },
     {
       "name": "alg 2: a valid seal of seal_type 2 in key 3 beside it: F5 and S4",
-      "security_cbor": "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",
+      "security_cbor": "a40071646174656b6579732d73656375726974790101025906afa300020158238158209ad39cd4be9d81bd644342babe25139768ace72112dc39ce0932522298245338025906823082067e06092a864886f70d010702a082066f3082066b020101310d300b0609608648016503040201300b06092a864886f70d010701a082017c308201783082011da0030201020208209c9a20b2fc65a8300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d030107034200046e9d1e98fd5761abb9165bdbfc2247b845f41a33ffc9d342b95f80a171f9a03b5496a17e60ae5d4e86d76bfc0e95dc0e21a8cda9f95b6d06df405fb278f16c11a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100d45ccb171e519a71a8ee79c53b7a7f3d29bfb00099341a8ddd51735ec32cde44022100a5244a460235a9a27d2b7c891f41f9a589a9a5b19bd407ff32312897523fa4db318204c8308204c40201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a0208209c9a20b2fc65a8300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420a38a0abc0eb4a329ca8c9f06767e8183cfa1c159af7fb5022a50a1038535aa4a3037060b2a864886f70d010910022f312830263024302204209ad39cd4be9d81bd644342babe25139768ace72112dc39ce0932522298245338300a06082a8648ce3d04030204473045022100dd43d55b3e88dab5497698c5705527a3934c51dcc3ed86e592347d339f607b5102203f2db4c2d4501cee1501a61d46add6628a46df90f9fbe92f3c26b98e3c5169cfa182039930820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104207e06fecec9cd8d823182b32e5fea7a1e5261f4604b988bcd101fb8c670b2474c02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d010904312204202704b6bf8fbaf296a20230993fdd730c264b81913a41d1a3d123bc2de28deb14300a06082a8648ce3d0403020448304602210098bf128cdb273973b94cc349ec54331f01df4860ec589868e6e54f967df3a8ab02210097ce803865e6c7c9b6e8ac4b789d9a0dece9cf6d14dc966dce2f037cef55cfef0359038aa20002015903833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042043a164d0c370e755e80ee2c771cb75f197e50a09dbbc968c892ef06d67a750aa02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d0109043122042053e69c48a87c05ed5597b9435e898b469ca1fa2596adc47fe884ae9f10882037300a06082a8648ce3d04030204473045022100fd8aadc2e8935eea79e83829e761c9973eb4d405ff4bc3dfc573be73f7315d5102206f8be7b926439b26c25d4b04507de47776e5e9886568ca647654f319286298a9",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -475,7 +527,7 @@
     },
     {
       "name": "alg 2: in the context of another head: F2",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3787ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -497,7 +549,7 @@
     },
     {
       "name": "alg 2: a message-digest of another message: F2",
-      "security_cbor": "a30071646174656b6579732d73656375726974790101025906b0a3000201582381582084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d31025906833082067f06092a864886f70d010702a08206703082066c020101310d300b0609608648016503040201300b06092a864886f70d010701a082017c308201783082011da003020102020817a4eee96b02780c300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d03010703420004a986a8fbf38687cc9b33e317826adfdbde8cebce8b371ad4446ed8944fb8fb4a25b13681b8f490136711d5b55946c8b64abd13ae5a1d26ec639cc89e54c64d89a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100b568dd629e42e98beddd33b9299d2efb83b47caba7969276dcbacb5441b67dcd022100d5887a4ac170180c9c5fbf0a02c76970730853b2fbe880659ac1f96dccbaea4c318204c9308204c50201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a020817a4eee96b02780c300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d0109043122042028ea0f231192a65711a644003b0cb3a049bfaf43397b36c8beed63137374ed973037060b2a864886f70d010910022f3128302630243022042084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d31300a06082a8648ce3d04030204483046022100e150941bc16b83041f302a9f0f8cfbb8367e4ed5d0d2028791769cbfcd5e9077022100f6ba7ad04cfb8a6e1a75fb549204cf563626663db0e132bd1d80f42cba84abb1a182039930820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042065122ba7682f08ff154612b6bb37e31daa45e5ff3787eaf194db4258bfed924202012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420b16285a5ad4d8853f2d5f61a6c2ab3c82ed41fc81e7a07a8d6128a24de695ff2300a06082a8648ce3d04030204483046022100f362d86ef7f131287075d33f1b440c70f5ef31f5739522b995e9dd58b3c87d33022100be97165b93d96511e6ea97f093b6bdb757efe9435de6d9e60d03e8aa437055be",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -519,7 +571,7 @@
     },
     {
       "name": "alg 2: one signer invalid and another absent: F2",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -529,15 +581,15 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "Ana López",
-          "issuer": "Ana López",
-          "result": "invalid",
+          "holder": "7fba28a1f26f9d52a50dcd705e32f5f57d5a8979adc3ef96517d4e93f2c6bbb2",
+          "issuer": "",
+          "result": "absent",
           "before_round_time": false
         },
         {
-          "holder": "a7c9f84f9e93ea8c9e935b30dde117eb76471da44f7e45f2696c393f614e86ba",
-          "issuer": "",
-          "result": "absent",
+          "holder": "Ana López",
+          "issuer": "Ana López",
+          "result": "invalid",
           "before_round_time": false
         }
       ],
@@ -547,7 +599,7 @@
     },
     {
       "name": "alg 2: not a CMS: F1",
-      "security_cbor": "a30071646174656b6579732d73656375726974790101025832a3000201582381582084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d3102476e6f7420444552",
+      "security_cbor": "a30071646174656b6579732d73656375726974790101025832a300020158238158209ad39cd4be9d81bd644342babe25139768ace72112dc39ce093252229824533802476e6f7420444552",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -561,7 +613,7 @@
     },
     {
       "name": "alg 2: SIGNERS out of order, beside a valid CMS: F1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -575,7 +627,7 @@
     },
     {
       "name": "alg 2: SIGNERS empty, beside a valid CMS: F1",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d736563757269747901010259068ba30002014180025906813082067d06092a864886f70d010702a082066e3082066a020101310d300b0609608648016503040201300b06092a864886f70d010701a082017c308201783082011da0030201020208209c9a20b2fc65a8300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d030107034200046e9d1e98fd5761abb9165bdbfc2247b845f41a33ffc9d342b95f80a171f9a03b5496a17e60ae5d4e86d76bfc0e95dc0e21a8cda9f95b6d06df405fb278f16c11a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100d45ccb171e519a71a8ee79c53b7a7f3d29bfb00099341a8ddd51735ec32cde44022100a5244a460235a9a27d2b7c891f41f9a589a9a5b19bd407ff32312897523fa4db318204c7308204c30201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a0208209c9a20b2fc65a8300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d0109043122042072b62e739dc090609750c53c15240618f2610302b88c44e0bc30b15684cb99223037060b2a864886f70d010910022f312830263024302204209ad39cd4be9d81bd644342babe25139768ace72112dc39ce0932522298245338300a06082a8648ce3d04030204473045022100bb6fe688d0299750ed6cc7fdd88950aca2613e76a1c81f855f52cdf367b65341022078e29d858f14b945a481cdb9633fdcd8b50db12c1245acfb612a6aab02c52fc2a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104206268ce09d6033b506d2fb149d4a0a242c294068470e2671b8a6bb0b9cdb3d53d02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d01090431220420bf225fe9cc5a991e675568b100274a43f960127fed5440aab02344b513d44534300a06082a8648ce3d04030204473045022100e42bda352e3b8472234748201bca57f0968eb451e12062a2dbde7a99b4bde934022056ad03460a039750dfbcb70008b0d22de265fb335a1a883177e429952b0e6ed8",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -589,7 +641,7 @@
     },
     {
       "name": "alg 2: SIGNERS with an element of 31 bytes, beside a valid CMS: F1",
-      "security_cbor": "a30071646174656b6579732d73656375726974790101025906aca3000201582281581f84476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d025906803082067c06092a864886f70d010702a082066d30820669020101310d300b0609608648016503040201300b06092a864886f70d010701a082017c308201783082011da003020102020817a4eee96b02780c300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d03010703420004a986a8fbf38687cc9b33e317826adfdbde8cebce8b371ad4446ed8944fb8fb4a25b13681b8f490136711d5b55946c8b64abd13ae5a1d26ec639cc89e54c64d89a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100b568dd629e42e98beddd33b9299d2efb83b47caba7969276dcbacb5441b67dcd022100d5887a4ac170180c9c5fbf0a02c76970730853b2fbe880659ac1f96dccbaea4c318204c6308204c20201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a020817a4eee96b02780c300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420e9ee213db3810e40032a91387aa2e64acfdbc10326652e94a801da0d95a133cc3037060b2a864886f70d010910022f3128302630243022042084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d31300a06082a8648ce3d0403020446304402206f0690bf213478bdaa3c0b4a518b76d24702135a4ae1f2635f02a289d25796c7022006ce00428753596cf9d675e1910e3b6a823cc098b8f134905b47d237064d812aa182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104209535a5c92eb0b479ff87096c67e01865440f3e90d7093fa24785ab76cbeceb6602012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420ecada8f23f7d2b546abb48f902a4e80c4dae0b94569a0ad5d7ac1c9c7c626c32300a06082a8648ce3d04030204473045022054f51675fc46dec55c5f963688a9c0400985f68c743a0a822d5f28f5e3bd11da02210096bf78f0c2d1b9ecf1d8f9ab2b87b6dc20b564b4bc1bf3c32df92ed2cf6f0eb1",
+      "security_cbor": "a30071646174656b6579732d73656375726974790101025906aba3000201582281581f9ad39cd4be9d81bd644342babe25139768ace72112dc39ce093252229824530259067f3082067b06092a864886f70d010702a082066c30820668020101310d300b0609608648016503040201300b06092a864886f70d010701a082017c308201783082011da0030201020208209c9a20b2fc65a8300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d030107034200046e9d1e98fd5761abb9165bdbfc2247b845f41a33ffc9d342b95f80a171f9a03b5496a17e60ae5d4e86d76bfc0e95dc0e21a8cda9f95b6d06df405fb278f16c11a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100d45ccb171e519a71a8ee79c53b7a7f3d29bfb00099341a8ddd51735ec32cde44022100a5244a460235a9a27d2b7c891f41f9a589a9a5b19bd407ff32312897523fa4db318204c5308204c10201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a0208209c9a20b2fc65a8300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204202f3fdadeb4c3f5699c4ddd0b855a2bc098302cd3f6a37f3aa2398cc0e7fee8943037060b2a864886f70d010910022f312830263024302204209ad39cd4be9d81bd644342babe25139768ace72112dc39ce0932522298245338300a06082a8648ce3d04030204463044022059f430787d7da2aca793e66ba0e43ee4c835d60f9f65d9046fc4c6042263b6ea02200c42ec2a3105f81340df6eb6a45a2a466ed37eea656631d0a2a60bd59be74cc5a182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104205e13cea3f2dc4f6b465ce1ff459e7d34621a1fd99e43fe9003b253fd2117b7b902012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd9318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d01090431220420f016c4d310e4595da90f6941c0234c0e4598413f041dd6236bf0c8efef7c0426300a06082a8648ce3d0403020446304402206949dab5b1ec69f81d7687c913c8433dbb096854c1fded297ce253dc9f8ed93e02202788aef60d77ca46c5d6b6b687a7bf91556472a2974c364f3d4627d15cbdc99d",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -603,7 +655,7 @@
     },
     {
       "name": "alg 2: SIGNERS with a certificate twice, beside a valid CMS: F1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -617,7 +669,7 @@
     },
     {
       "name": "alg 2: SIGNERS of 16 entries, the most, each signer sealed: F6",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -627,142 +679,142 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "Firmante 14",
-          "issuer": "Firmante 14",
+          "holder": "Firmante 09",
+          "issuer": "Firmante 09",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         },
         {
-          "holder": "Firmante 03",
-          "issuer": "Firmante 03",
+          "holder": "Firmante 01",
+          "issuer": "Firmante 01",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         },
         {
-          "holder": "Firmante 05",
-          "issuer": "Firmante 05",
+          "holder": "Firmante 10",
+          "issuer": "Firmante 10",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         },
         {
-          "holder": "Firmante 15",
-          "issuer": "Firmante 15",
+          "holder": "Firmante 04",
+          "issuer": "Firmante 04",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         },
         {
-          "holder": "Firmante 01",
-          "issuer": "Firmante 01",
+          "holder": "Firmante 16",
+          "issuer": "Firmante 16",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         },
         {
-          "holder": "Firmante 02",
-          "issuer": "Firmante 02",
+          "holder": "Firmante 14",
+          "issuer": "Firmante 14",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         },
         {
-          "holder": "Firmante 16",
-          "issuer": "Firmante 16",
+          "holder": "Firmante 12",
+          "issuer": "Firmante 12",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         },
         {
-          "holder": "Firmante 06",
-          "issuer": "Firmante 06",
+          "holder": "Firmante 07",
+          "issuer": "Firmante 07",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         },
         {
-          "holder": "Firmante 09",
-          "issuer": "Firmante 09",
+          "holder": "Firmante 05",
+          "issuer": "Firmante 05",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         },
         {
-          "holder": "Firmante 07",
-          "issuer": "Firmante 07",
+          "holder": "Firmante 11",
+          "issuer": "Firmante 11",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         },
         {
-          "holder": "Firmante 10",
-          "issuer": "Firmante 10",
+          "holder": "Firmante 06",
+          "issuer": "Firmante 06",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         },
         {
-          "holder": "Firmante 04",
-          "issuer": "Firmante 04",
+          "holder": "Firmante 02",
+          "issuer": "Firmante 02",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         },
         {
-          "holder": "Firmante 13",
-          "issuer": "Firmante 13",
+          "holder": "Firmante 03",
+          "issuer": "Firmante 03",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         },
         {
-          "holder": "Firmante 08",
-          "issuer": "Firmante 08",
+          "holder": "Firmante 13",
+          "issuer": "Firmante 13",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         },
         {
-          "holder": "Firmante 12",
-          "issuer": "Firmante 12",
+          "holder": "Firmante 08",
+          "issuer": "Firmante 08",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         },
         {
-          "holder": "Firmante 11",
-          "issuer": "Firmante 11",
+          "holder": "Firmante 15",
+          "issuer": "Firmante 15",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
           "before_round_time": true
         }
       ],
       "lines": [
-        "Firmado con un certificado a nombre de «Firmante 14», «Firmante 03», «Firmante 05», «Firmante 15», «Firmante 01», «Firmante 02», «Firmante 16», «Firmante 06», «Firmante 09», «Firmante 07», «Firmante 10», «Firmante 04», «Firmante 13», «Firmante 08», «Firmante 12», «Firmante 11». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «Firmante 14» (emisor según su certificado: «Firmante 14»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
-        "  «Firmante 03» (emisor según su certificado: «Firmante 03»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
-        "  «Firmante 05» (emisor según su certificado: «Firmante 05»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
-        "  «Firmante 15» (emisor según su certificado: «Firmante 15»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
-        "  «Firmante 01» (emisor según su certificado: «Firmante 01»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
-        "  «Firmante 02» (emisor según su certificado: «Firmante 02»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
-        "  «Firmante 16» (emisor según su certificado: «Firmante 16»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
-        "  «Firmante 06» (emisor según su certificado: «Firmante 06»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "Firmado con un certificado a nombre de «Firmante 09», «Firmante 01», «Firmante 10», «Firmante 04», «Firmante 16», «Firmante 14», «Firmante 12», «Firmante 07», «Firmante 05», «Firmante 11», «Firmante 06», «Firmante 02», «Firmante 03», «Firmante 13», «Firmante 08», «Firmante 15». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
         "  «Firmante 09» (emisor según su certificado: «Firmante 09»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
-        "  «Firmante 07» (emisor según su certificado: «Firmante 07»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "  «Firmante 01» (emisor según su certificado: «Firmante 01»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  «Firmante 10» (emisor según su certificado: «Firmante 10»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  «Firmante 04» (emisor según su certificado: «Firmante 04»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
-        "  «Firmante 13» (emisor según su certificado: «Firmante 13»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
-        "  «Firmante 08» (emisor según su certificado: «Firmante 08»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "  «Firmante 16» (emisor según su certificado: «Firmante 16»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "  «Firmante 14» (emisor según su certificado: «Firmante 14»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  «Firmante 12» (emisor según su certificado: «Firmante 12»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "  «Firmante 07» (emisor según su certificado: «Firmante 07»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "  «Firmante 05» (emisor según su certificado: «Firmante 05»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  «Firmante 11» (emisor según su certificado: «Firmante 11»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "  «Firmante 06» (emisor según su certificado: «Firmante 06»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "  «Firmante 02» (emisor según su certificado: «Firmante 02»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "  «Firmante 03» (emisor según su certificado: «Firmante 03»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "  «Firmante 13» (emisor según su certificado: «Firmante 13»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "  «Firmante 08» (emisor según su certificado: «Firmante 08»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "  «Firmante 15» (emisor según su certificado: «Firmante 15»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  DateKeys no comprueba quién emitió los sellos."
       ]
     },
     {
       "name": "alg 2: SIGNERS of 17 entries, beside a valid CMS of the 17: F1",
-      "security_cbor": "a30071646174656b6579732d7365637572697479010102596d2aa300020159024391582007d599acc78169f777ad444377ae3a89da0c680a762d6f3a61eeda3dc90e984858204be912775404da05812de056d756fdeb9d288fbf02e05b8dec669242b101355e5820554d127d73102dda5038bd01ad5c01d7f0a1e37fcbd45a6f1ac4f5e52e9ce19958206c49616ed7c440fbe2b7646a7f31485aefb2ade393a201189dae6830fd04780e58207b5382d148c70f4a5fc48e608ee33e2223a48feceaf75d042eef9f0af428ef4358207f5741a8d060c5776a36d1588e717fc455c46ea893211fd79180634baeba70cf582091a5b1f1573c2adb4e3393a744a51f1af03f45860bb2b5efe404da4acd3b2889582093aae1a69480dad5da2b26175f1b6fe3c734dcc3882919ddb029cc037885ab225820a125a5c482051795d4424bb196547ecb6a2a8a4d898dfd64b514a3f18eca762b5820a15c752812015184bc15ea70aec3c2ae34f0711c9af4b9cb65917bd72a5f91585820a52c99e28590dc187b44d81b5830900b849d13f2b77b5ca9d504494e7949aea75820b26e2d2d281740452b591b167058bfca8a212629589f96906b0700207a7ad6a15820bfd5e0b55a4088b3107561ac41d9bec2a4c96d9ed129a020cd95cccbd601eec05820df5af1cf14fcf49b1593104afa2b7a70878ccf15d5dd63e4ef1f567477ea8ae45820eaa83426ae731a5de3ad9528df169c41395f463f4853eba5c7e5fcefcb614c535820f2e06e6ea8c4b4614420f0d277a6feb0deaad261f702aa412e7710221b04036d5820f4e2a930321fd995cd24b545e20a883450a520b18d23eb121474b97e3b76201b02596adc30826ad806092a864886f70d010702a0826ac930826ac5020101310d300b0609608648016503040201300b06092a864886f70d010701a082195c3082017930820120a00302010202080789f55fcd4882c8300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203033301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652030333059301306072a8648ce3d020106082a8648ce3d030107034200047735555ea0af22cda454eb34e3d38c16779e8762cded13648fb9499693f4b4fd12a5a13a07b331e24ffe5b2c6d81c464bee87e706554d1aeaef2718dc207692aa3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203033300a06082a8648ce3d04030203470030440220431b4abe456a0bd26bf37e13281791c43c25affdf32a0e6b7c35537156fc0f7602201a13357c3c7e3bff233044eda419e04b8507aa4314403995126bba48f7b353e53082017930820120a003020102020818cadac6d07749cd300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203133301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652031333059301306072a8648ce3d020106082a8648ce3d03010703420004542d4618e6716667acc3b37c37123d6309f77ff6920b9247bec9ba43f21506bd3fee380483cdcb00793a62456a472319e67dc085037dd280e3b7ec5be59f1137a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203133300a06082a8648ce3d0403020347003044022033f677f8da9a037f5c0df52f88e5824376dccf59fc2b4e362ad567a3517636cb02204f5cf0e84242b590142d3963deb613f69731183fcc7b8ee5f92ae88daddd47513082017930820120a00302010202081fe99410dbe90f7a300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203038301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652030383059301306072a8648ce3d020106082a8648ce3d030107034200043aae71b67e4233f590498caf9f0cbb878fb9e5bae1a0932bebe696d0b34519253ebd288f9b6d60a6b5ff6f3352ff719a6ceb0f472fcc341f1d07310e9e59d1aaa3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203038300a06082a8648ce3d040302034700304402203de33b864c850d4081673ae58dd2ec8253dc022fededf0da29437e616ffb566202207616da52dee74a1423ddf3e99567171055ab8aecef991ef5d0d65680d1f088bd3082017a30820120a003020102020803d06c6c8f5fa193300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203136301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652031363059301306072a8648ce3d020106082a8648ce3d03010703420004a59dbcba792e6fff17dba6c9972ee83408af4fa25c5bab7a147f63b917ccd292a95f713056f5e2dfef5bdcae1d3e8d1ab0e20d6c7bd2dd8c1c4afad4a86cd518a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203136300a06082a8648ce3d040302034800304502203dafa55d2166fc86ae91de99857d055a9d3a70acb03eff62b45fca0573a835fd0221009e64cab7b68a2054200d4191257492fbb624892d7434bfdb267bbd2039820b473082017a30820120a00302010202080b56a89d5af569b3300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203034301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652030343059301306072a8648ce3d020106082a8648ce3d03010703420004ba71c70bd313dec1abd928de932a234d44bf3ce1332f1501954e649063e72c147cde72f4876d275827f41cf1c5360bcf3cf10bea7aab61a68cd142c6e8a5b8d8a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203034300a06082a8648ce3d0403020348003045022100f26e3665f6c2411c53ea5c1ef595a3823054d55ea9f3e67b67ae41129ac26ca502205151b21a7dcd1ba3e3934d450bd960f3a0238572ba8971b787ec06774c220d1c3082017a30820120a003020102020814a203d3073d44e5300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203037301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652030373059301306072a8648ce3d020106082a8648ce3d03010703420004089e720859f6c3cb6034ac75daf8168986978d01ac2934f65c9660a91117c16e392dd88d94566af4c6862c06d053948c3663132a9cf9e17b76c23e2ee64df5a6a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203037300a06082a8648ce3d0403020348003045022100d486ae70c630f9cb10d3c9e4707d847076326b62d85875d01deebc90208e121d02203a3e0ccba63673d5ac0f01a271ed021bea5d07ac5559f0aebd5a2d5c6c6c9bf53082017a30820120a00302010202081dbc49e063a640d4300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203131301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652031313059301306072a8648ce3d020106082a8648ce3d0301070342000403f37589c25b78b0f9496669d7a4e048a07c702ed41f4cce19ab5939ae7a9443b1a0860992aa5562503f6486d23decf4a09f4cad15a6e3f1474ce2ad94e835afa3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203131300a06082a8648ce3d040302034800304502206a07e33a92d293c9ebe8c0d718e5ff19d363683e476d0c96a893aa8df2f580f1022100cbed8ffe0d4347fba89aed5d7111d9af08186805391318a59de806e6043a87b93082017a30820120a00302010202081e5da526e488cc7a300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203036301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652030363059301306072a8648ce3d020106082a8648ce3d03010703420004bec32ff77619f42698463ba550574d2765c8852a42e673439cc269b36dd60868d50eab77096bc680b2a2b99cf38ae5de717da96915db0efd9460a65d6abd928ba3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203036300a06082a8648ce3d040302034800304502205c5f1130830463fd693059207106d0378797f2fe4be3248aa915d58d78ecd63b022100908065f561ba1fc19c748f99e209bc1211cfe90ea3a973bb02e2f79b1481be113082017a30820120a0030201020208235a1a82d739ce3b300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203130301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652031303059301306072a8648ce3d020106082a8648ce3d03010703420004d54a3a0fe62c2676e0595829c00442724a73c155e1bebc54b4add5fecd63b81a74a3358f531543208af95618dcdafff5badb81d9dbf070347274c78450d6bce8a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203130300a06082a8648ce3d04030203480030450221008d3e76f88e91a629d993c741b79a70f80173000830df0c1a22f0a05010cf6f53022059c5a9d0bc24dc8388db20e482d200a5a728ce5b63a19fffade5c8f4d93f565a3082017a30820120a003020102020824346f24941ca901300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203134301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652031343059301306072a8648ce3d020106082a8648ce3d03010703420004423fbc3776e5ffdf689031ec956c70fb2fb31d3bf3355199d304b80e3036ba75bffa33968f7d533205962a7627eda5d9b6ec0efd3cd8086de568357b6c467788a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203134300a06082a8648ce3d040302034800304502200d34a47985585120129586b2c5be208a99be5f476fd0683c3829f1b48458c8b0022100b6a99616838ce93c1122e7faced7f3b3e4d9bee3b1ee7ecbe3d7ed8bc196a3093082017a30820120a0030201020208262f181d319e7f3b300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203039301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652030393059301306072a8648ce3d020106082a8648ce3d030107034200044a6b49339efe1d0dbc20aa236c64f338ad5890269ee809320f3c36638cc8c5cd967ba9d6aefe751156a25d8d6f589006270e4a93c8c298d6e0deee12acf5427ca3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203039300a06082a8648ce3d0403020348003045022100a20c31ff7cd32dc1f9bb8d438855b148e69dc39492e2ceecfc0662c701895a9b022067612248faaeb1981701aa845e9c069ffd249bb2e3040d0643a675a5ef5e08c93082017a30820120a0030201020208268f999b616d329f300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203031301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652030313059301306072a8648ce3d020106082a8648ce3d03010703420004c127dc65860d20c61c8317e1fbb649a0522cd95a0e6205b1638c90bda8aec17ea2bc1751f7f3599f466cd7c998418f166dbd849ca663387da015b8db0f18f48ca3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203031300a06082a8648ce3d04030203480030450220563fae89aa1b588d34330a9a7c6322f5ed2243e1678d0f79476873b0ae57f15a022100ac9dcdfc8fe88e04b9b16d0ac9b07dd45c8fff285d1d9d6be705d7c020f881613082017a30820120a00302010202082b979fdcd7c39cda300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203032301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652030323059301306072a8648ce3d020106082a8648ce3d030107034200048d83d942618837a16319ad19af5aec28057367a94cc29724c81c4fe08821b2f9b93dc65369d47c858bfaed985ab379336a6290040ae6ef8bb0c993168c99b6a3a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203032300a06082a8648ce3d0403020348003045022100b76462d77fe101aef621b57e8d7b285356f834954bfe37c4909c1ec7520767a4022023bb0025968b8da3f54800f7c20fabf4c65607c7588dd15040854f3c66a6bf753082017a30820120a00302010202082c7b1c7f6ba952e6300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203132301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652031323059301306072a8648ce3d020106082a8648ce3d03010703420004f2a4d6007264b466d2a1335f8a211c45f3cbacba4e4c3da1e5fbdb9ce23103b1ca8fdc945053b1d0d9bfc4fbca17088458cd8b59725f512da0605238f01b57b3a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203132300a06082a8648ce3d0403020348003045022071a3a50a8ce90b64519dde72ce7da15328a87c4c1e989dcf48ae2bf495c98155022100be7a785774fc389be9e7cfe6904da4bf73d47f634a995a1899d7cfea30845dc23082017a30820120a0030201020208343f870ef90a07fb300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203137301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652031373059301306072a8648ce3d020106082a8648ce3d03010703420004e7f5e36fb59b3e1295ba5d3321c4fa83e7ea221130daaabb1cb0669bea9ab1c2d999c77c574441624ddd16225bdbf19a60f0eaa0d67288fb258750b5e8985bb5a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203137300a06082a8648ce3d0403020348003045022100c70c920c93d19756bf422fdce7fa83607d87aac3043a01dd6635ae8bfa6050c50220192b1634514c0810af07f73bd904770492757f708ef8e3633f9df2bf67e7b4913082017a30820120a00302010202083e9eca4e08e4ce8f300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203035301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652030353059301306072a8648ce3d020106082a8648ce3d03010703420004e795c41091565b75b9d7a7606e245c6a38a4fa965a335cf6aba0f1e822f78965848c8db2ca4386dab8ac77789bfcfc2f976aa22f470fa9e6eb6aeb20be33b60ca3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203035300a06082a8648ce3d04030203480030450220425b9040edee9bc092cd1266c870e38219b4ad6b9e9be01981da75e7209170bf022100c90e97305933be519b0d96ba4f4145e76d1de9c0fdb8cc2031b2ba30b2d9a96e3082017b30820120a00302010202082a90e816430ce8c3300a06082a8648ce3d040302302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203135301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652031353059301306072a8648ce3d020106082a8648ce3d03010703420004de9bc16d3d061388ab6d11f627d93f97ac83934c5772d41b1a2d16fe9f72ee6593b648adb75e9dc60f70b8cee5cc7f30fefa766046dfaf397d8d36b29944ae31a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4669726d616e7465203135300a06082a8648ce3d0403020349003046022100d9743d7c3f826d8cd2677b9f45adb10de248e5b853532d1a2fae9fb116cbd9d9022100f66a6e192a35db710f6507aef5a82f400d4882f66c2745c993e4ba2b0bb23ab831825142308204c2020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e746520303402080b56a89d5af569b3300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f31283026302430220420b26e2d2d281740452b591b167058bfca8a212629589f96906b0700207a7ad6a1300a06082a8648ce3d0403020446304402203c8b662708ef2581a275275084a29fd6629925877696268ad66d14163214c30702207e1b475f34e1ef5619da4f6194ad04191c7cc2c7c9e75b089052b2def1969df6a182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420fbbcde53a72881810370f5268d4e4d0899cef177159458633053dd811374f35202012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420a8dd1a2eae548a36df56443f20cfff02b1c70d065cd4554ff819486bf76ee3f7300a06082a8648ce3d0403020446304402201f3e0adb744e45f6715e2c6fef9f29a30c875c7ed51fa73247fd491e84d36ef402205165fa6e8a03a3f7e0cf1ce7b7b771ccdeec85596d14b944ed73ec725d8c51f6308204c2020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e746520303802081fe99410dbe90f7a300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f31283026302430220420df5af1cf14fcf49b1593104afa2b7a70878ccf15d5dd63e4ef1f567477ea8ae4300a06082a8648ce3d0403020446304402205b1fb64f59eacbc98faf79cf706bd8bf3174e9521c15a221d191d7781f0b260b02205b7079af8538ad7fe9aef39f18d9a57c69a8567c37b59725a4c5b463abadadc3a182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042091d4506f52c3871232dc59f28ec94e827a8282e9dfb0295ece9a7ce305b5b31e02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204200f772c696878dee91c2f96da65e8ad3bd892dbe3c51ae583f2f7f198f6318939300a06082a8648ce3d04030204463044022074bdbca4b29a4895a3f78d55e1c9be7e688fd60e1385d833828296c4a03a7bca02203a412ae7286c2ff725531e5d34d2c3c54f3bb282da2f93d8a152665693b75e55308204c3020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e746520303302080789f55fcd4882c8300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f312830263024302204204be912775404da05812de056d756fdeb9d288fbf02e05b8dec669242b101355e300a06082a8648ce3d04030204463044022067f923c78d7ed57340ec6561023d8ab7e6895438b001720ed63a6c8ca1cb1d2802204783910f6fda1b95923560ee9aa2d198f08bcb66088fd99f0b6eeae3e589cbc2a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042086bcb6e80e82bd0bc55954db354a7315577b06fbe5af3cfdf606d86be6af4d5902012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204207abb08a784f4a8be00bbf5688633618b9cae107faad6270eb432a09c294a6bdb300a06082a8648ce3d04030204473045022100e9f00938752c8291f5c2ad855622cfa6f6938a221189028e4916f781ff0d3f7902200c836793547fb21c881d5c2ceae444e642558788dae15912118f0ffca4978571308204c3020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e746520303502083e9eca4e08e4ce8f300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f31283026302430220420554d127d73102dda5038bd01ad5c01d7f0a1e37fcbd45a6f1ac4f5e52e9ce199300a06082a8648ce3d04030204473045022040e92db3280c5ccf2141f7ce474eb2a03c73b4dd7d137b3b9d74ae03ab09df720221008fccd423ce4417506c27c7c0c2f8ba774c992224b80facb3832be7d4a97730bfa182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104203c08fd6e31845a76a8215f8ad68ad4dca39879885ae59ea762da7839300feb6902012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420802d6ee9e07d2d9634ef89e33b1bf4cec6e94602f1c0577db686f0c87295c2f7300a06082a8648ce3d040302044630440220151fa9d298bdb5af0b7511f6baedc4d93928f5332753bb26d15cc39a3ac6afb202205c12a7c59777903e9e2ca592ca58dcc8c5c9bc015fa888e58487fed8e16b99a1308204c3020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e746520303602081e5da526e488cc7a300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f3128302630243022042093aae1a69480dad5da2b26175f1b6fe3c734dcc3882919ddb029cc037885ab22300a06082a8648ce3d04030204473045022073e7b428493b289f1b47dc9e7460b5dc54aad5f22f3cf7bcfed9015ed4c61a01022100c6ecaf1ddea0ffa610fc651d19114bbbc6bd05f56ae94feabebdb38d0dfa16b8a182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042077eb9281205ad7cbce0e52ebd5b14e914c654fe420e2d93e02905b663c6e602d02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204203c3c58c1c5ed194e568ab05ea8541da6f8e7157c0fa5c5aea6655e0c445e145b300a06082a8648ce3d040302044630440220399ca41d84039fc340f3f779a0ee263150c06c699eef15806952ecc808d1ba7002206dec0a4f41097af411e0a598e37a9d2a87e3621187af3980da270ec5909ce149308204c3020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203037020814a203d3073d44e5300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f31283026302430220420a15c752812015184bc15ea70aec3c2ae34f0711c9af4b9cb65917bd72a5f9158300a06082a8648ce3d04030204473045022100c7c1ea4e098ae3db2fdb7862cb06d2a6369e4c0d21cbebed2149dc46f174fb58022072d6764df26514bba32dc6a46b06a7905ab1bd930349a168e6076c2c37ffe4dca182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420bd85cabe4565500b153e1ab232bfaf5edf1590f3d83e4b2e2ecea7fc6006efa802012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420ec3dce173f76426e78bdc710de87de0e572f63eddb087c9fb30b53d3d8b19ca5300a06082a8648ce3d0403020446304402203dcff6bbae05daa3c7e51f3b320814b907a3775db3ab8bfa7589f55f40847c1402200198fcd7a6837ff682333c844e5ee14bb89da2e97ca4b27a56717ec51d5ccc18308204c3020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652030390208262f181d319e7f3b300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f31283026302430220420a125a5c482051795d4424bb196547ecb6a2a8a4d898dfd64b514a3f18eca762b300a06082a8648ce3d0403020446304402207d7176537f4d3a3ba4a21e00186558a824f5483752944b56773cd2dc6146e7c602206057f17e649b17442adce836bbd6a2b64933ccf1be4167a46960892f0f62ba0fa182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042022776453dec9465792e98b0091b72ae103f0bcd0c20ebf602ef3e0114d12f94402012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420153c6f5e33992a8764a5cbffb2e34a1a2b07f1c867232cd8dda2b3a83530fbb6300a06082a8648ce3d04030204473045022100c74dd2e3c15839b0541c77a30da2b34da61322389eddda9d2b61e0b28a267c80022050fe257b88db9a4aa8f9c72c1386b41e3d2d8ed139fc830993a0706799145125308204c3020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203133020818cadac6d07749cd300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f31283026302430220420bfd5e0b55a4088b3107561ac41d9bec2a4c96d9ed129a020cd95cccbd601eec0300a06082a8648ce3d0403020447304502200f16d388b6939e6b11c56e2dacfe70beab2cfc40d86fcea1c7f810c80ee35123022100decfe8880fd60852c17fd8974bff0662f22b05e5a4fe24a02c58c10e5e1ebfb0a182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420df22b68375486750eaddc52ef4fba05dd8f2829bcca5acc39b8e633646324ef402012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204208548bc3bf6e7e2dc1b31c2f68f8247c5375d2e9158285d7fcc8942f7efb04b8a300a06082a8648ce3d04030204463044022025e79291009c77d6cf287991632880699f4198cccb1f9810c0a4612f52f6817b02206d5e4297370e995d47bf962b70cc211b46ad81da4f648fdd7a517b09a75efe61308204c3020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203134020824346f24941ca901300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f3128302630243022042007d599acc78169f777ad444377ae3a89da0c680a762d6f3a61eeda3dc90e9848300a06082a8648ce3d040302044730450220775e7e9970f8ce4826245d6561da89cff9b14f0663b7060f55631afffbc60e4c022100df4a6a757794840820576538008f34f24865e867d0f286964b362fa60d2775c6a182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104201cfc1834ad8a0f6f768c190dc61ba4f1f5ba9dde97623de9ecbe2ff1fbb51b3702012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420621c66fbb0b26050368f8fab04e83375a21907c964269429d2c022169574a565300a06082a8648ce3d0403020446304402203804cbf4759c4f734ce47959be4c6fd111281ae072ae63685ffcd980e59747e102207d0828b64ebce540f6f27909603289adf78ac810aa51bf92347e79bfebac82b5308204c4020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652030310208268f999b616d329f300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f312830263024302204207b5382d148c70f4a5fc48e608ee33e2223a48feceaf75d042eef9f0af428ef43300a06082a8648ce3d04030204473045022100fb0e1188a654b03ae90ffecf2c7d34b962300f81b9bce5f6b35f4c84cd59e533022052e129d8f78aae5b7eb0a47817201410c048398cacc58564c25979f7f417b45ba182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042012d5131b83041173797fd2879ec3c9314cc7b54783abe6ef3e4adba091befc2702012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420999aee39b32e9ae9da6137ff388fa07cc8fc89212b05c55b1137ca325195212e300a06082a8648ce3d0403020447304502210087b7c10cb22de1b3b7049547c351be875a5da1c76913c72e9977d031f1cb64a80220282a45d59ad134c3f7793f6daed24a59c40eecbb730125f3be5c2c9a2dca76d5308204c4020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e746520313202082c7b1c7f6ba952e6300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f31283026302430220420f2e06e6ea8c4b4614420f0d277a6feb0deaad261f702aa412e7710221b04036d300a06082a8648ce3d04030204473045022100f3fcdff6c35345ef60ec64d754e92f6bfbefa08666999a69be392ba00bd9fe920220205c72bc1f187fe241b12b29ffa487fda7b1fd778371ab950d8ca8ba349e8f77a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420fe8ef777cb28d6458e44ecab7fc84cacb61ba26ba2daa634d4cf8c9494d6a1c802012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204203c232c0b535d7f7f2884aba5a336a4c610548de33d1546da028d648626ced413300a06082a8648ce3d04030204473045022100d1a076fd95a0bd22aa2e27a81ef7c7f28424782e9f6e8efe3415954646db82fe022021d2dac3e5bdc188844123150cb042d9abfc050e72340e06484884a629b1b37f308204c4020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e746520313502082a90e816430ce8c3300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f312830263024302204206c49616ed7c440fbe2b7646a7f31485aefb2ade393a201189dae6830fd04780e300a06082a8648ce3d04030204473045022034a44615d0669fb176bb37e7c6db79e380bcc4fc8aa6c26947962a082e86d46a022100d688b7d6bdffcf65ccee6046b665580ae67279e6ba1a8147ecce96f8eaa389d9a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420e8b17ece10e6c401c6e789ca23bb3b00b9a92b9ce6c7cd7ed7e50fbf81d663e202012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d0109043122042016b894d41bad8aeb35c8a34f886e436e1a103440d686918f5b2473626ba701b4300a06082a8648ce3d04030204473045022100b1138c14bdb1e428d381cd73ef8d95ab67a432c59e6a1d54c7c247137cd3ee8b022038b33d197e758dddc8f8ea242b8f9cac81660310cd0947f1078486f1f97cc4e3308204c4020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e7465203136020803d06c6c8f5fa193300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f3128302630243022042091a5b1f1573c2adb4e3393a744a51f1af03f45860bb2b5efe404da4acd3b2889300a06082a8648ce3d04030204473045022100d175f0db0ad7f1c63e92f25876a4b67a7ddcc3502dd8af3c1e2d2407d47ab3c00220650a0dbe4c535f41237d17a73b62879d7e1d564e843acbf1322f6c571ffe0e5ea182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104209543f648252214886e095a22fe9fa6aa19eaf1ab7d20a3f4af285640590cfdd102012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204203cd07fcfc5bae6363b436b9e1c59abb23369f02c91e048ae61fcf7da1c906334300a06082a8648ce3d04030204473045022100c54867bd83835cd7f8b06aaff181274ca06c15ff5a0f49202a2d00b6ba5ccf3202207ad750f32990413e282a406ce8c706a5dff0abff62baa56be9e8653f5871c9d0308204c5020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e746520303202082b979fdcd7c39cda300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f312830263024302204207f5741a8d060c5776a36d1588e717fc455c46ea893211fd79180634baeba70cf300a06082a8648ce3d0403020447304502210084562ec8679603b39d09baf1337872a618a84f07d0cdd02af77ea024fda90e41022053b4408e886f3294ea49b7327277ae4bea74f0f99e5796d41c9d97ae30ba00d9a182039930820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042090a55bd2959ef925a0bc34577950e9df54aa63e99e6d1e22e0ed315e28a4192c02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d0109043122042009897670191ea647e7df8c04bf060bc78bf33344ed42935ef3566d489fec29e3300a06082a8648ce3d04030204483046022100c2e5d760ac595d21a99f53e1def79f98184f036952ca785e13cf3bbdcb1abb78022100b0fb5bb063f9129925ef750ac56014ce37daf804efbd5d212f83085166587c46308204c5020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652031300208235a1a82d739ce3b300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f31283026302430220420a52c99e28590dc187b44d81b5830900b849d13f2b77b5ca9d504494e7949aea7300a06082a8648ce3d04030204483046022100ad14610951b4d7fef8fd34a65f5910b6465f4f86933fcfd13c8f6b9c801b4a52022100cb5432e018954aaf390759b0ff4dea89c0fc63c430e8f803b9c0333e8dfebddba182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420db5ac4641d438c9ba7b17a9f709d14dc5875b26ccf2b97908ff251cc8baa579602012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420dcb4da1a2b171be2abf1f43241ead62c76c92534501e67bb93aa227df603dc9e300a06082a8648ce3d04030204473045022100e872b03cd94ad707a2f70237687320479400c73f933103a46158c396c9ae5f0602200ed37945d2555917960a1e81496eeedc3da6bcfb498d6c2fdded1a9fc3abc29e308204c5020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e74652031370208343f870ef90a07fb300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f31283026302430220420eaa83426ae731a5de3ad9528df169c41395f463f4853eba5c7e5fcefcb614c53300a06082a8648ce3d04030204473045022041b5879e4cc8b5d1321d4440310f7489cbc14706ed830e23a619fb775ef185ba022100b2dce31064f34d1f15c2af2779fcf5f585e9a722dead64ff6a056998eb86e8d5a182039930820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420e69737f55b739ee2f89c8e010a136c9c93d1a0f2a7a2d4eef34a547a4ffbd8d002012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420961355026b85d97568d555d760991c840da160d91485bdbbfe5da3faefb709bb300a06082a8648ce3d04030204483046022100c55bfe61d2932c96e0c2fb2208cdd92eae8ea96b9556906161f86189d8d270c3022100c791a8a22db8f8c543e8efd6d8dfa3dd7d76c5d72191a5fab544c280c59b9eba308204c6020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b4669726d616e746520313102081dbc49e063a640d4300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204206c74f9d5165de4221a3ab006d1df02cc01e406e1634ea9192a877412fc9b73a13037060b2a864886f70d010910022f31283026302430220420f4e2a930321fd995cd24b545e20a883450a520b18d23eb121474b97e3b76201b300a06082a8648ce3d04030204483046022100ed8627b065a886115fdd111a22dfddda67fdf7dbf6578434ad8dab34766ae33a022100fd1048ef5b8377392a03aac7e1c65be915a932ea85aa2eb2bd4e2f060a070386a182039930820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104207ef75f3c9fc2ded99c30e27b28d356e326fd838d021c780b88ee48259f68a8a602012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d0109043122042091d605672da850ed4a2f7bf647b9aaccb4163640a7b68c5ccc05608029f5a834300a06082a8648ce3d04030204483046022100d5eaf22a1f063e6a69a611b9a8a7f26a43fa16e39134fbc9376afdc7e4446a8b022100b97691d6249ec976bfe72e7433a3bee757c99211a8d6a15999d6ea9a37be9830",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -776,7 +828,7 @@
     },
     {
       "name": "alg 2: the signature in BER: F1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -790,7 +842,7 @@
     },
     {
       "name": "alg 2: signerInfos out of order: F1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -804,7 +856,7 @@
     },
     {
       "name": "alg 2: two SignerInfo of one certificate: F1",
-      "security_cbor": "a30071646174656b6579732d7365637572697479010102590ceea3000201582381582084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d3102590cc130820cbd06092a864886f70d010702a0820cae30820caa020101310d300b0609608648016503040201300b06092a864886f70d010701a08202f8308201783082011da003020102020817a4eee96b02780c300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d03010703420004a986a8fbf38687cc9b33e317826adfdbde8cebce8b371ad4446ed8944fb8fb4a25b13681b8f490136711d5b55946c8b64abd13ae5a1d26ec639cc89e54c64d89a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100b568dd629e42e98beddd33b9299d2efb83b47caba7969276dcbacb5441b67dcd022100d5887a4ac170180c9c5fbf0a02c76970730853b2fbe880659ac1f96dccbaea4c308201783082011da003020102020817a4eee96b02780c300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d03010703420004a986a8fbf38687cc9b33e317826adfdbde8cebce8b371ad4446ed8944fb8fb4a25b13681b8f490136711d5b55946c8b64abd13ae5a1d26ec639cc89e54c64d89a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100b568dd629e42e98beddd33b9299d2efb83b47caba7969276dcbacb5441b67dcd022100d5887a4ac170180c9c5fbf0a02c76970730853b2fbe880659ac1f96dccbaea4c3182098b308204c10201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a020817a4eee96b02780c300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420e5346b7763a20d80f7a0ae67d5f32387359677d0dad91e56f0e86d45668d7a4c3037060b2a864886f70d010910022f3128302630243022042084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d31300a06082a8648ce3d0403020446304402200ff7490ecc0f6c3b7a30e11b503720aa3c46976dcf26d6ba246143ff4e5b2bb102206cbd9b6c0dad5f4bc10a609501c1d4ec9c53a1b45c56583647ae7394e8931e4ca182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420955b60ad6c57a289bc7a8d3bd68b24bf681c099db0ab1399558985aa3ffce6ed02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204207158d3e1e400fd498cad639fa7d60d41e7497d60553749ea05e15ec0aad0c5d3300a06082a8648ce3d04030204463044022015e578dcaf6b649cd7bf09dc6b8c17440e8b5f10748b5f815440c26e35726550022069a5d53164bc8e5281342c3a7272cea22bb06c2bb440d7d1a4d0d22ebbe2c508308204c20201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a020817a4eee96b02780c300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420e5346b7763a20d80f7a0ae67d5f32387359677d0dad91e56f0e86d45668d7a4c3037060b2a864886f70d010910022f3128302630243022042084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d31300a06082a8648ce3d040302044630440220631452b3eb6dfe904db4b488304daf3b1ed17b456dbbbd2480f310919c0f63a802202c1a56e0a4c4e657a807cde8aab29fc547601d901524276e73d204a5e147e7d0a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420d837dc274995bfd5cf4e3365f8ce8b6db6a0759760625cac1bbadea01e90b60602012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d0109043122042099fd05ca7a974b7257c69235e4fa96350ac16b5b2ac738a6b77adc1dd4f8ba55300a06082a8648ce3d04030204473045022100d998bca2366059cd17ff40c0508898396ad10f086c97e12d2c92879253d97923022036733d1d67512074606e0a50c0e2f74fcf4f3d8467e44b317cf1c366a735e19d",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -818,7 +870,7 @@
     },
     {
       "name": "alg 2: the same SignerInfo twice: F1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -832,7 +884,7 @@
     },
     {
       "name": "alg 2: a SignerInfo of version 3 with issuerAndSerialNumber: F1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -846,7 +898,7 @@
     },
     {
       "name": "alg 2: a SignerInfo of version 1 with subjectKeyIdentifier: F1",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d736563757269747901010259067da300020158238158209ad39cd4be9d81bd644342babe25139768ace72112dc39ce0932522298245338025906503082064c06092a864886f70d010702a082063d30820639020101310d300b0609608648016503040201300b06092a864886f70d010701a082017c308201783082011da0030201020208209c9a20b2fc65a8300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d030107034200046e9d1e98fd5761abb9165bdbfc2247b845f41a33ffc9d342b95f80a171f9a03b5496a17e60ae5d4e86d76bfc0e95dc0e21a8cda9f95b6d06df405fb278f16c11a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100d45ccb171e519a71a8ee79c53b7a7f3d29bfb00099341a8ddd51735ec32cde44022100a5244a460235a9a27d2b7c891f41f9a589a9a5b19bd407ff32312897523fa4db3182049630820492020101800a416e61204cc3b370657a300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420a38a0abc0eb4a329ca8c9f06767e8183cfa1c159af7fb5022a50a1038535aa4a3037060b2a864886f70d010910022f312830263024302204209ad39cd4be9d81bd644342babe25139768ace72112dc39ce0932522298245338300a06082a8648ce3d04030204463044022010c8c461ccfdf5f9d5ca6fe577c4b0873a82c514b99dc20a90a7703c17f143c602205c5723ac2b7d2fe16e0d85cb8462b687fe9e13864cdede0f9d21418591f976cda182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042078f6037f536af42e3466721a96796b64e2feaf85b2b5a53bb83e060413f008af02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd9318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d01090431220420ffafc29ecc5f613781192548ac9aa2e86722c57ddcc0946d6aa0fa31c2059557300a06082a8648ce3d0403020446304402207859aefc74dd32d0b7751e6ebf78a6bac08495b9ce01dcdf804a14666be8ac7c02200bc2a7acace5ecd3681d7cc8afb4e06b12b81c6144459815f39bcf37cd8fcd2d",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -860,7 +912,7 @@
     },
     {
       "name": "alg 2: two content-type attributes: F1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -874,7 +926,7 @@
     },
     {
       "name": "alg 2: a second content-type with an empty set of values: F1",
-      "security_cbor": "a30071646174656b6579732d73656375726974790101025906bca3000201582381582084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d310259068f3082068b06092a864886f70d010702a082067c30820678020101310d300b0609608648016503040201300b06092a864886f70d010701a082017c308201783082011da003020102020817a4eee96b02780c300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d03010703420004a986a8fbf38687cc9b33e317826adfdbde8cebce8b371ad4446ed8944fb8fb4a25b13681b8f490136711d5b55946c8b64abd13ae5a1d26ec639cc89e54c64d89a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100b568dd629e42e98beddd33b9299d2efb83b47caba7969276dcbacb5441b67dcd022100d5887a4ac170180c9c5fbf0a02c76970730853b2fbe880659ac1f96dccbaea4c318204d5308204d10201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a020817a4eee96b02780c300b0609608648016503040201a08193300d06092a864886f70d0109033100301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420e5346b7763a20d80f7a0ae67d5f32387359677d0dad91e56f0e86d45668d7a4c3037060b2a864886f70d010910022f3128302630243022042084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d31300a06082a8648ce3d0403020446304402204865496581fc9d9c1e49a395da5279f9bff882da89b0afcd347444c8467cb04e02202f3e8bd17aa1c0afdd96415760772ebf5b024fcb0592d596b9029e2818123472a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042080ebd0c9536eb6399573247dc477413843007ddde7c078bbca5dd8d33e7c9cef02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420d343c0786b592b85152c03f681acd5d83433d82a06c6f6dcdb01ba2e3dfb9a3b300a06082a8648ce3d04030204473045022100eea06a91682c98d13f7974ae5ca2935fb0ae95582e3e166b12f7a6997665b8ac022075d31b3e1bdd96e9eb34e6f72d744b4f7f9662f7be9200d4dbfd45fd60e156b9",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -888,7 +940,7 @@
     },
     {
       "name": "alg 2: an ESSCertIDv2 of SHA-1: F1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -902,7 +954,7 @@
     },
     {
       "name": "alg 2: an ESSCertIDv2 with the hash of another certificate: F1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -916,7 +968,7 @@
     },
     {
       "name": "alg 2: only a signing-certificate, without the v2: F1",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d73656375726974790101025906a2a300020158238158209ad39cd4be9d81bd644342babe25139768ace72112dc39ce0932522298245338025906753082067106092a864886f70d010702a08206623082065e020101310d300b0609608648016503040201300b06092a864886f70d010701a082017c308201783082011da0030201020208209c9a20b2fc65a8300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d030107034200046e9d1e98fd5761abb9165bdbfc2247b845f41a33ffc9d342b95f80a171f9a03b5496a17e60ae5d4e86d76bfc0e95dc0e21a8cda9f95b6d06df405fb278f16c11a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100d45ccb171e519a71a8ee79c53b7a7f3d29bfb00099341a8ddd51735ec32cde44022100a5244a460235a9a27d2b7c891f41f9a589a9a5b19bd407ff32312897523fa4db318204bb308204b70201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a0208209c9a20b2fc65a8300b0609608648016503040201a078301806092a864886f70d010903310b06092a864886f70d010701302b060b2a864886f70d010910020c311c301a30183016041425b01779d18fbf5c2e8a8d8a88e7c7452454a060302f06092a864886f70d01090431220420a38a0abc0eb4a329ca8c9f06767e8183cfa1c159af7fb5022a50a1038535aa4a300a06082a8648ce3d040302044830460221008c8225879886597fcb2196f1c464079cfb5bc46d2919fa71bd4f0f48b78659c5022100f056bc113f34657af8538547e6f9006c50a215aaf921457fbad77c865a5acf4ca182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420f7a64807845a911d786ebaebb48a05f609ce0cc9ffc8e09d6b13c962609a0c7d02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d01090431220420d919ef2464b1e180cee7da124c3ee29968a6a9c78ea98463b3b4fb10d0897ef4300a06082a8648ce3d040302044730450221009382c6a4f9efa22988b1870d0411453a694bddcc98738080208fe850b9cf844002204f4e0a2a58e265eae1e9ce1804008e3bff32e0f0e482ed5c891006407b8e303d",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -930,7 +982,7 @@
     },
     {
       "name": "alg 2: two signature-time-stamp attributes: F1",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d7365637572697479010102590a48a300020158238158209ad39cd4be9d81bd644342babe25139768ace72112dc39ce093252229824533802590a1b30820a1706092a864886f70d010702a0820a0830820a04020101310d300b0609608648016503040201300b06092a864886f70d010701a082017c308201783082011da0030201020208209c9a20b2fc65a8300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d030107034200046e9d1e98fd5761abb9165bdbfc2247b845f41a33ffc9d342b95f80a171f9a03b5496a17e60ae5d4e86d76bfc0e95dc0e21a8cda9f95b6d06df405fb278f16c11a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100d45ccb171e519a71a8ee79c53b7a7f3d29bfb00099341a8ddd51735ec32cde44022100a5244a460235a9a27d2b7c891f41f9a589a9a5b19bd407ff32312897523fa4db318208613082085d0201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a0208209c9a20b2fc65a8300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420a38a0abc0eb4a329ca8c9f06767e8183cfa1c159af7fb5022a50a1038535aa4a3037060b2a864886f70d010910022f312830263024302204209ad39cd4be9d81bd644342babe25139768ace72112dc39ce0932522298245338300a06082a8648ce3d040302044730450221008b35f7ee7389b3656f39601e35481f579e6954d724d7b96a1ec63faf84768635022061b39a725e9f007341e3d0954989ba0f91f8f693520eecbd83558a022170de41a182073230820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042033b85a98a9e4f9440c36051b7879f0a5eb05268a142cb6b2e91f2576c909478202012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d0109043122042040250b532518c544c21417fcc3d159e4cdb2789907a7d786e0a338cecb1e6757300a06082a8648ce3d04030204483046022100910c008c0ad0ae1473df141f9770be029f67e64902c67e68fc38dfc2dafff063022100c85d3eb501b1221890900a659ba1943b908eb8002af90f5ad9abbdcf679216d430820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042033b85a98a9e4f9440c36051b7879f0a5eb05268a142cb6b2e91f2576c909478202012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d0109043122042040250b532518c544c21417fcc3d159e4cdb2789907a7d786e0a338cecb1e6757300a06082a8648ce3d04030204483046022100f52c7f5218256475ed26187f27f5274be1b1aa275e3ab5f799c6e28ab2db38c402210082fbd084d582821498a8ec414c92050f4d42fbe3d8f3b832fa183164db3a9c81",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -944,7 +996,7 @@
     },
     {
       "name": "alg 2: a CRL in crls: F1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -958,7 +1010,7 @@
     },
     {
       "name": "alg 2: no certificate of the signer: F1",
-      "security_cbor": "a30071646174656b6579732d736563757269747901010259052da3000201582381582084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d3102590500308204fc06092a864886f70d010702a08204ed308204e9020101310d300b0609608648016503040201300b06092a864886f70d010701318204c6308204c20201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a020817a4eee96b02780c300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420e5346b7763a20d80f7a0ae67d5f32387359677d0dad91e56f0e86d45668d7a4c3037060b2a864886f70d010910022f3128302630243022042084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d31300a06082a8648ce3d04030204463044022014daf0b89d2d973977888698d140ce03afbd2c189a486e2be1d5fb399feae385022019ee925d082a46fc95abf93cf99b90c27ae4ea537c4fa4b282a5c19db7d7a3b2a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104202b0d33beb6ae6db2f8659529c655b3baa74a75c5b2bda601d189f4215ae3d0f602012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420c6bcdb92170b39ea86de8dcea83298e3959fc4c939bce27caeb7776ddc5d4acf300a06082a8648ce3d0403020447304502210098d0b26056c864a183112ff57cda869dd93255c574e68496d95e0b16612e898c0220723def7b6e93c26a4e37f18c3b59c184395cd3cfa645b2c813147beb748608f0",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -972,7 +1024,7 @@
     },
     {
       "name": "alg 2: the certificate of the signer of version 1: F1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -986,7 +1038,7 @@
     },
     {
       "name": "alg 2: the certificate of the signer valid until a fraction of a second: F1",
-      "security_cbor": "a30071646174656b6579732d736563757269747901010259065ca30002015823815820bb894ce611443b7b10b639fe5f148cebad5b76a4eabb8d77e43ccb719ce640e60259062f3082062b06092a864886f70d010702a082061c30820618020101310d300b0609608648016503040201300b06092a864886f70d010701a082014a308201463081eda0030201020208391d5f2084eb7367300a06082a8648ce3d040302300e310c300a06035504030c03416e613022170d3230303130313030303030305a181132303339313233313233353935392e355a300e310c300a06035504030c03416e613059301306072a8648ce3d020106082a8648ce3d030107034200046527d595155b7e2d06d521c29cf22816e3afe019bbb38ce3aed841a845a27bde2d2427b5dfc0051a995ca0156eb8a6e5731b931adda6d04cd7346fa8452848c2a331302f301d0603551d0e0416041446e5df81aee488fd8c3ab6f9f795b374dfdaa10d300e0603551d0f0101ff040403020780300a06082a8648ce3d0403020348003045022100fe88205d0936dcd998568a0155a576f065049614f54df4234551ef3c96e789be022049f23bfc9cf835be97949c70703275643fcfdfad0905de908c7cc5b1cdc60995318204a7308204a3020101301a300e310c300a06035504030c03416e610208391d5f2084eb7367300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420d87a3059015448013115cf74662bad01eb84ff86d62ff89ffbb617f8967f1b3b3037060b2a864886f70d010910022f31283026302430220420bb894ce611443b7b10b639fe5f148cebad5b76a4eabb8d77e43ccb719ce640e6300a06082a8648ce3d040302044630440220441d26c5061f936bf5f97275b98673c1c2b56c11f00d14504ec404382096a827022078e6531495ecc55208312b14a2185a2c55883884d2a846bf9b949940bb64688ba182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104209724a3e4491e5cfa0618341b2ee51563a10339bf5e6f805a92e999d6350190f302012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d0109043122042046406af54e6e84dc633a45184b0ad0cdf4aa54455a0b8c135cd31943bb406ab5300a06082a8648ce3d0403020447304502204e80009fd86ba4a1c0e83e0bd45590135af768e7639ddd942c43b4cc21cc2b2402210090e4c21058a578dc0d4b017ed6906452fb949f960c4d00666fb545311d2615a5",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1000,7 +1052,7 @@
     },
     {
       "name": "alg 2: the certificate of the signer with an extension twice: F1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1014,7 +1066,7 @@
     },
     {
       "name": "alg 2: ECDSA P-256 with SHA-384: F6",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1039,7 +1091,7 @@
     },
     {
       "name": "alg 2: ECDSA P-256 with SHA-512: F6",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1064,7 +1116,7 @@
     },
     {
       "name": "alg 2: ECDSA P-384 with SHA-384: F6",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1089,7 +1141,7 @@
     },
     {
       "name": "alg 2: ECDSA P-521 with SHA-512: F6",
-      "security_cbor": "a30071646174656b6579732d7365637572697479010102590799a30002015823815820a46f6e57009cf1300ec5371aeb6273d025fff2c2f942e47e72765135cfeac7350259076c3082076806092a864886f70d010702a082075930820755020101310d300b0609608648016503040203300b06092a864886f70d010701a0820203308201ff30820160a003020102020814256b6f08ed3077300a06082a8648ce3d040304302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a5261c3ba6c2053616e7a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a5261c3ba6c2053616e7a30819b301006072a8648ce3d020106052b81040023038186000400503775f71936107af369bfc49fff473965c3a74192994dbcb60011e5f495a88ebb82a5e77281118ba99823cbafc8d52f11f011f83f0ba1c5a06845dbd78ad6087c013b4dc7ce52f288a93575d1b40cd5b52f2504c8ae30f14bf9212bac7b5b94309272fc7b081737c280f1a4501303075398e320f870bcf95c970aaaff24950aa89a08a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a5261c3ba6c2053616e7a300a06082a8648ce3d04030403818c003081880242019c421a87002574f05da8fb8bae2cb2da08d6d9d2d40a98e08f2780a12a6221c2f8bfa27a0fdbcece6d5ef04875716b914f250dc56323bfb402e506b68725f9cf0b0242009edeb02777835eea8f9aed3faf04a20a6724f4cb88e0de145469a655db7a71ff26ccf01ac6cda8de519534556258a706cf98c5cd4cde7bcbc3ef2c06e5a33ef3a63182052b308205270201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a5261c3ba6c2053616e7a020814256b6f08ed3077300b0609608648016503040203a081a4301806092a864886f70d010903310b06092a864886f70d0107013037060b2a864886f70d010910022f31283026302430220420a46f6e57009cf1300ec5371aeb6273d025fff2c2f942e47e72765135cfeac735304f06092a864886f70d010904314204405b192f8d81b23e561f4eec7b48eabb3fe384eeec0545f9a557c554d458d424a8f3a09d69b38057385e142990dbeb3e4de2f874a741b323e1bc470fc591a33f2e300a06082a8648ce3d04030404818b30818802420143724f7f44c443e3e3f9846667e006144ec0c8bcc5747d7a52205efbd6a0411c33294add8f319dca0307dd8b814c3c24b30986038a22197d8374f6ecf066971bc80242019200b3d8f0830dcada81e38e54b6712e57b56901c15b8a96943627122097978db38fffbef627fd508557f23e75233f547cd314cca850bb86721eb77e220f9711eea182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420f849fe1209c796b0ed418486439283bed98504cdb8544efd59bf4ac27f171d4602012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204204bd149afc9e469d5add0fb5744f63eba70580dd24e084df1100689ce480a0ced300a06082a8648ce3d04030204463044022022f840a061b5c840eb325ac219ae1c233153f74e0e47fbd707012ee0a18226ca0220244f9245e6f0d8d2eee1ff5efd57317f9be6a3c93f94851cc3e04f9a1116db65",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1114,7 +1166,7 @@
     },
     {
       "name": "alg 2: RSA of 2048 bits, sha256WithRSAEncryption: F6",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d73656375726974790101025908fca300020158238158207fba28a1f26f9d52a50dcd705e32f5f57d5a8979adc3ef96517d4e93f2c6bbb2025908cf308208cb06092a864886f70d010702a08208bc308208b8020101310d300b0609608648016503040201300b06092a864886f70d010701a082030a30820306308201eea00302010202082a7dfd68e3c33d6b300d06092a864886f70d01010b0500302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a30820122300d06092a864886f70d01010105000382010f003082010a0282010100c84c42651353f447c5408f7fe6771a1c89138ed7f392f9c061b506e28237feea96a2385469bb723efea846eef79f15d2c2c50e613cb5d27e672470429759dc0b1b6d4572972d40fa36c6ee21c517ae76f524c26c4e482ed7596154b0388eef7c8a95c0b8c7cafca5fab3362ada502df8610c66647e31f95e6fc7ce52e4a1dd2051ba291f18f957286ce170f9526da17a47578ff0db76aae22c54f87af93ab0f7e436dea99fde8d394a94b75d74dc96b9dd7610fb7980a66a0cc4286c8767e16c19d609cf32521801f5c36f2e146cc4b0ed0e33ecd7b57aaa8d713a92433070a86de8c16e616bee3ca9159ad4905081ba2a9254af41d314b447b997f5c1ac147b0203010001a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4c7569732047c3b36d657a300d06092a864886f70d01010b0500038201010083af0ea7090022bacdc5564befc93b63748162b01c3785d5e0236f6c1b75c072856b3bb6b908659c9bd09c570b228a43fe9235c9d3a5b36e1a444048dce34c67ed7881fae1e94c360a1f5ea596922cd10cb9d5e22f26a10db65013276af31f5717faf12350558935118ed40468b8e1bfb80561129975f4916df85fcb32aff98f6243eb405c4c7f261c272644976de92daa11731860d80103c2c29caef4f2cc6467988021edebcd2e7b673f9b708a50a61907c77553e66d6748ab042f336ccbdf92fe21d260fd888c19f8ad4155743bb96dfdeae9fa07a46d559639189d42411e4653fc0e808c2931e8ce63cd9e3097780c06c1e3a73fe6189538b1c95d968e053182058730820583020101303a302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a02082a7dfd68e3c33d6b300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420e4d904a8c5eca500b9fd8d0f0f1c20963b665f5daa182f24fddc720b3c3ec8c13037060b2a864886f70d010910022f312830263024302204207fba28a1f26f9d52a50dcd705e32f5f57d5a8979adc3ef96517d4e93f2c6bbb2300d06092a864886f70d01010b0500048201002674f4caee71287625b4319f371fc1141414d6e820fb04e04a43dabebe2e207a45b1bf5f43180c8aee38f05cacce6510bf649686472c7817fb6124f8840141c75b8f14b7777156ed58680094446e26ed65ae5b390adf34a5349e883f1273a4917077a2fd04c626ee7545fd12db826d49a082b016b877dde2c33795c0e1b829fabddcfcdf2c85bf1ae1a2caf08e821eda71a6a2e2b137856ff3f662c0794f915fb32bf23c7deac12aa245326c2eef7c73070ef6d108e82eb9ec743ad1dcfcdd45329dfc888cfbc15d85236aa3dfa054f32bd552c55879abff8385b066d63bca9561a1c2c238fc3b854af0e55f654ead18bde955a374c156cc358f5265e54d4db2a182039930820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420c54dcde8c9dc238be847abab26831e259e3e492f585755b9fcc45fb55174c25f02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d0109043122042075c8fd77f65bcf92798273292d2bd52c0b8287d1621d987adf702403d65c637e300a06082a8648ce3d04030204483046022100e44862ef3d9ca3a2ffa478bb820c19b26c588cf518503825d48d7463e4295170022100bfd75a88f98aefa477e2b55e3cebf8fe951764d0538f44c333f321099fc23809",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1139,7 +1191,7 @@
     },
     {
       "name": "alg 2: RSA of 3072 bits: F6",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1164,7 +1216,7 @@
     },
     {
       "name": "alg 2: RSA of 4096 bits with SHA-512: F6",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d7365637572697479010102590c17a30002015823815820b3cfcf49423bb219887cfec8e7c3255422c8c356f2a067911eb873a8b61a125802590bea30820be606092a864886f70d010702a0820bd730820bd3020101310d300b0609608648016503040203300b06092a864886f70d010701a082050730820503308202eba00302010202082176060403f37340300d06092a864886f70d01010b0500302d31163014060355040a130d446174654b6579732074657374311330110603550403130a5061626c6f205275697a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b6579732074657374311330110603550403130a5061626c6f205275697a30820222300d06092a864886f70d01010105000382020f003082020a0282020100b0f1d2322618d176e88e39143ff0537f8baeca46ea13637511ca882c5161cd5dc6cdc03ff40582a3b1c5e33955f4857bd6aac7e724ae897f928755bc6a1d253f2a289e699475443356ba5a5465136e187a526b6b71f03db8dd693a8ff40ed0b0773ee0b7cb07a64a6aa23375c755406fd1728675df0916e52a9426ad80cfb7dcb4bc99824fb2a33e8b726b0c30aeb054babb62006b8f20a465062f5891d2229cee6a08fe66c674270287df048632def91d2f89d25a17fcd11852f4173295afe12d7e7723434523ae1c3bba7d49af5676f0d070358424fed9e276c01e7c33e7b75b6847a5817a9a0cf3a460cb564204738c0cc6beb371ccbdd879ae192c89f31d742e3ecc54232bb4f42d0cd3e5dec30577cf7883bfcfd03750864adfc3aa66a7ca35399baf25b8093e30c2f35245103717f630b492360c6a9867defc77f07b5a4a4723392b753181cacf9b819e19ac077c3e0eb857da69c5ab2f87aec8eee2e2df38dcad760d6fcae91d58e7982d038596097004eafe9c5de653c568dde39aefc939c5e699e302051e070f840b5957923e13f8221bb2e02de6851f390369b27d2915b91a03460e3659424abc79e21da2fee03741547bf2235aed6f46cc4dec4cd3215fc9e325d3bc04a698231a4700ee7d4c9f1d58b31b1d6997ce5033129d4ca201296110bd709f6b75b98cd014be34b693de54519b1489f3aba83cd0e7fb730203010001a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a5061626c6f205275697a300d06092a864886f70d01010b050003820201009e6aee8058b7b884dc2a375d823ec6296041c5ca8b57e015873fb325fc9d051c06346e828888e6910b9b610d318e8337d07ff069fe7d0c7a638434862cb16b7676db1ec5d56e7928294fdf4257db727d6186ea8146736f43d0534f2fa8b25c0c21d325bca083190b8c9980714113594394137d3829cc5963ced7e0245b9f244e5f22761ffb0b604853bc09c1e84e996936c089cfa0fa8b418cc90c75dfe83e0b680810a8a89b4b25395b9e50659d1041a112139ae4dd116d3e516bf5d0c9c83a2e53385033e3638920f3e76f205dd099fce54a65db6bd53f84d5abd3052442fdc29001d52c73d55aa7f9cf3b523957b870678e0da2920fec436cacb97b2fe0c4dd861926a1743d916544141a18b32e7d9731111231c94a43cc6e79e83af7b7c412ac24e6fed32c45f3bdf9ca36fa4048c2b2774302ea419149b2527747985a091e31600d3216bff0e43bc77db80097729d47f4e10b41bf1542fc35ede4396e01163bdc34e063c0e0dd3fea161fd2af680b40e85e31350bcfbb6992dcea0a1d3ecd54128cb041183511bd33a26919501225dbc3e973527d0ace8d009994fa73111e2a63616df3f7f69bd0c747975848da09559fdbe48d219d9f200f0dc9aa03a0a542ea5ca2827ccd8ae42ff8a1a4a23d5a50c4b12fe4f2dc3e73eafe96739842e87984b5513813ac7a50801240641832ae2c5a138e9bbafaa0ee09b10f3837cd318206a5308206a10201013039302d31163014060355040a130d446174654b6579732074657374311330110603550403130a5061626c6f205275697a02082176060403f37340300b0609608648016503040203a081a4301806092a864886f70d010903310b06092a864886f70d0107013037060b2a864886f70d010910022f31283026302430220420b3cfcf49423bb219887cfec8e7c3255422c8c356f2a067911eb873a8b61a1258304f06092a864886f70d01090431420440ada327109ccf6fdf83b70b377610b6fc0792bbfa89709ba3d407b8a647c2e9d9715d5ff5aaa9714e43913bca07172153fbb69125d1c0af45edcfe25fa26cd313300d06092a864886f70d0101010500048202008fa651be0f1e5f0ba0d5641ed6cb94d843edfd8cc1b0225f24836818d163a0aa856ffd8d92ac5349b3357e86c5d2390f412be4d791d4b4b6cb5db41c948517633b8381a99a47e02972a5d2fddf88a53ccbc7d44f32c2b027de341e766774b5c6ed8382e4f1eaede21f3f28b2e5e8e44be0ef1df492e590ab5b328cea4cffe381eac52a4bdf2aa5078fd71fc28c0adcf71cd9c8e66610fb16f0d1f5ed829d840ec175efacddb9b80230767b03117e8b587ad6f8d65ed6bdd1b2c2e853bbf184fcb1dccd1c1462f9f14a6d06ee6be1123d862769a76b71889a6ee457aa379e2a9d0386ac73440981ca6ebe179f6c94e995a4f67f3e1a06ddf0df42c6309d5e3864213d10b067bd98d45af49ce8188a873b05b4a80b5af5a0ea78042bd6ccf5b013926d2f0c8bd1861f0bed3275820310fd3ae5c24514d5a9a415f8f73bfddbc12571c5e5aad4abda76ad31e760de24d7b480f7b5eb9ccfc8ae0bc408b020439dd58881e4700558422aad0b8334433aeb726bb7cb8504213170f261f7f9ee841e5ce084bb01371e9232bd7384100538da138780b0955997e53218bd72fd931cca69927698d220efbe943d80d946d2b956269524dad1bd0ef441f0ce8d0f728490292707d89870572218c2aa53a950250af727a4b3349eafcd881d16da95a356eb0559a54e4666103e27438c37e972489b24fd8c7980e45d6097d5977ea9f3b587efa182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420ed8dd1ac4106fb0fd6c585b07d379fbdfe3925503dcfcdd11e1c35caab5f4aed02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d01090431220420139076131b6824bf930151e6771e7ac0f1a85ac634d2cf730822ce0aebf0c88a300a06082a8648ce3d04030204473045022100d9a99d17c7fc2761aada114c9ac4f7670b8b551d0d50c32a3881195ad40d0bc102207afffc7031dbf41c5a8e17a8a0eac7c2b86ee3929188a69b2aa6f4b6a93d27be",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1189,7 +1241,7 @@
     },
     {
       "name": "alg 2: RSASSA-PSS: F6",
-      "security_cbor": "a30071646174656b6579732d736563757269747901010259092aa30002015823815820a7c9f84f9e93ea8c9e935b30dde117eb76471da44f7e45f2696c393f614e86ba025908fd308208f906092a864886f70d010702a08208ea308208e6020101310d300b0609608648016503040201300b06092a864886f70d010701a082030a30820306308201eea0030201020208325566517f129f8a300d06092a864886f70d01010b0500302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a30820122300d06092a864886f70d01010105000382010f003082010a0282010100b25cb0a3f54aa8487b15fba355e38dd4b68183fad4925688c195529caba202127232fd41e799960260f05b120a89703feae05d8725661e3e156b7243158c70a9afe71390a8e29e8afd792458fdecc752403b55c0af444012defb62055e349180e787f0605771744e9ba71049fbe78b153b0bab73d62debed2ef88979c6d6877591a09daf186279973b9a1d9cdbebc0838b220378577b639e601086d79aa7b0bc3a19dce14cdc7c176bd93efa74c1b56256edaa4efa66567772e4f8f6d3a602524664e485399b159a09a69b4dbf6ba5adbb62835dbb0379ca948103cb7715f889f48cb871c5a704f2a9ff6a4d7ea1e89acd02344743210955441f6b3c99cc92170203010001a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4c7569732047c3b36d657a300d06092a864886f70d01010b050003820101006e5267bb69fbfa581dc0bb3b2e54a394a67d8b432b575dff6593cf09350e40a238720585329acf2807779c1da6473d551ee6dc3d81e8379052b9db1b26c74c302fd3f9601c62aa2ff34ec6c6dcf234728b889bc2463875d03ae8563b751380f6a4d0d554ef9cf7b520ad3a523f794739b72f398cc73d1a7f8cf8d21a24c5c994a102993be83ba0bc0968cb43b9b719a3226d22e310ee4dbdff8a74b4ea328d8f6296d0c1500c1332fa012d67a9fccb5c99ebab7a2119d960e51a1ef80d694f6c1f1afda9f42e18058873ef91cf851352e680aabd5e541f2a3ddf6d196b76be26d03b2e173daf290144d7e489679aea10acf91301b8c93d79bde85cfcbdd391b1318205b5308205b1020101303a302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a0208325566517f129f8a300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420545ade85714b87a7ba396029179031b9e8ef8e8d0078fb5e4e4bd09bea49ea6d3037060b2a864886f70d010910022f31283026302430220420a7c9f84f9e93ea8c9e935b30dde117eb76471da44f7e45f2696c393f614e86ba303d06092a864886f70d01010a3030a00d300b0609608648016503040201a11a301806092a864886f70d010108300b0609608648016503040201a203020120048201008d40446cb4f7dec901b1d9d7376f92ce603a87e7539ee2da3522357cd16b802b8e4a9e88122fdac7bdd3af45427b3fc16209b6c08831aaec51bb57ffbd22f00e110d10155f7624dcaa0ec984d919d8249fb4f9c92f971d49b077fc8c205b6af7cb85f939780d001ecdc0d0645120e3308a73652ca6b0bef85fdd34b7ac7e94dbe7a35e89682fae1ae5af74fe35613dda35034910d92c6ae02712b4d75e84213884dc5c2050b64fca2af4d13890dca1450208082a631d6bc9655d1b465c20937facfa0333ee626196924974ed9b21598b20ef4314d4caf6093b09788640e6e79a81f797922ac6b04a6e00b6b614fd80fb97a6663e67909ff8b9af52efbecc9b2ca182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104203df29e7e52ece75bbe78136096bd4493d9be0ea088fa931cd94a8588ddd046f902012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420cc172053c61fefd97b677c46648055e19ae6334a70ef145aaf6692a96bf2538b300a06082a8648ce3d0403020446304402205a7109d64c3ee53013da4b5db9eeb4c0fd357baf41c6f34bab5796b62294887102207018d38ee7ad7cf0e0f0122b00ebeef2161611a4cab71ce6c9ee9d28d68c1221",
+      "security_cbor": "a30071646174656b6579732d736563757269747901010259092ba300020158238158207fba28a1f26f9d52a50dcd705e32f5f57d5a8979adc3ef96517d4e93f2c6bbb2025908fe308208fa06092a864886f70d010702a08208eb308208e7020101310d300b0609608648016503040201300b06092a864886f70d010701a082030a30820306308201eea00302010202082a7dfd68e3c33d6b300d06092a864886f70d01010b0500302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a30820122300d06092a864886f70d01010105000382010f003082010a0282010100c84c42651353f447c5408f7fe6771a1c89138ed7f392f9c061b506e28237feea96a2385469bb723efea846eef79f15d2c2c50e613cb5d27e672470429759dc0b1b6d4572972d40fa36c6ee21c517ae76f524c26c4e482ed7596154b0388eef7c8a95c0b8c7cafca5fab3362ada502df8610c66647e31f95e6fc7ce52e4a1dd2051ba291f18f957286ce170f9526da17a47578ff0db76aae22c54f87af93ab0f7e436dea99fde8d394a94b75d74dc96b9dd7610fb7980a66a0cc4286c8767e16c19d609cf32521801f5c36f2e146cc4b0ed0e33ecd7b57aaa8d713a92433070a86de8c16e616bee3ca9159ad4905081ba2a9254af41d314b447b997f5c1ac147b0203010001a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4c7569732047c3b36d657a300d06092a864886f70d01010b0500038201010083af0ea7090022bacdc5564befc93b63748162b01c3785d5e0236f6c1b75c072856b3bb6b908659c9bd09c570b228a43fe9235c9d3a5b36e1a444048dce34c67ed7881fae1e94c360a1f5ea596922cd10cb9d5e22f26a10db65013276af31f5717faf12350558935118ed40468b8e1bfb80561129975f4916df85fcb32aff98f6243eb405c4c7f261c272644976de92daa11731860d80103c2c29caef4f2cc6467988021edebcd2e7b673f9b708a50a61907c77553e66d6748ab042f336ccbdf92fe21d260fd888c19f8ad4155743bb96dfdeae9fa07a46d559639189d42411e4653fc0e808c2931e8ce63cd9e3097780c06c1e3a73fe6189538b1c95d968e05318205b6308205b2020101303a302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a02082a7dfd68e3c33d6b300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420e4d904a8c5eca500b9fd8d0f0f1c20963b665f5daa182f24fddc720b3c3ec8c13037060b2a864886f70d010910022f312830263024302204207fba28a1f26f9d52a50dcd705e32f5f57d5a8979adc3ef96517d4e93f2c6bbb2303d06092a864886f70d01010a3030a00d300b0609608648016503040201a11a301806092a864886f70d010108300b0609608648016503040201a203020120048201004fc209fc632cde2168bee3fc389e5efbcac04975fd705fc8c60fb77db2a8c08812e29b0545183f13acf404124e4c3e2ca1cf37d9af9e3e14a3da25ec347636e5671733e1b8e6053ad1f10c8f5613d08491c98168d648e514c2cde3275b7efa3299929ca2a0b5dc986ab396665d72fd20e65df1963adb5797ec10391f0467c0c11c300a2626fcbd9f85ce32deb2eaf9a2dcc0f6034bc7c3e6a9f5c5db8fdd0cc1e368ff6ec6e91b252a49f9eff3f27500e97d1754f53ae385dd3e0abc1a3766d84e071eab408e93d63b5c5e58b9cd584749b6aa664264f34ec3dcd32f404d58de9a8adb9b802f8a421e5ba14deb16ae3b46e0d7a543733ac065b9d891edbdb256a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104202b7025a69a2f9ab446b875c86c3396f19fedb7ddc027990c4ecf1b6160aaaa0b02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d01090431220420565233e3f06018f1c45e5139dc612d4c35a234ac75fe65dea190da9c84b03a61300a06082a8648ce3d040302044730450220344e997a794a03a451a4b77c79f8c56aa74c69b7f4ff1e28f1d762ddda1b2635022100df696b1e1984aa27ed138c196de36226c34597dfd730d32cf477ed878fbb15e6",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1214,7 +1266,7 @@
     },
     {
       "name": "alg 2: the sid by subjectKeyIdentifier: F6",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1239,7 +1291,7 @@
     },
     {
       "name": "alg 2: a signing-certificate beside the v2: F6",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1264,7 +1316,7 @@
     },
     {
       "name": "alg 2: an ESSCertIDv2 with SHA-256 written: F6",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1289,7 +1341,7 @@
     },
     {
       "name": "alg 2: an unknown attribute with an arc of 2^31: F6",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d73656375726974790101025906c3a300020158238158209ad39cd4be9d81bd644342babe25139768ace72112dc39ce0932522298245338025906963082069206092a864886f70d010702a08206833082067f020101310d300b0609608648016503040201300b06092a864886f70d010701a082017c308201783082011da0030201020208209c9a20b2fc65a8300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d030107034200046e9d1e98fd5761abb9165bdbfc2247b845f41a33ffc9d342b95f80a171f9a03b5496a17e60ae5d4e86d76bfc0e95dc0e21a8cda9f95b6d06df405fb278f16c11a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100d45ccb171e519a71a8ee79c53b7a7f3d29bfb00099341a8ddd51735ec32cde44022100a5244a460235a9a27d2b7c891f41f9a589a9a5b19bd407ff32312897523fa4db318204dc308204d80201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a0208209c9a20b2fc65a8300b0609608648016503040201a081993013060d2a864886f70d0109888080800031020500301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420a38a0abc0eb4a329ca8c9f06767e8183cfa1c159af7fb5022a50a1038535aa4a3037060b2a864886f70d010910022f312830263024302204209ad39cd4be9d81bd644342babe25139768ace72112dc39ce0932522298245338300a06082a8648ce3d040302044630440220683b7c050aefd4d35b81e36ea0226a592e7c8e4df23a3ec209929b47b614f0280220244407cbbbe739a10ee9da4fbc1b88ff3b46123255d4a7bfee3363761fe604ffa182039930820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420468bc3a095ee1ecec3a29e7e746c93490283541c76580cf1e94440c20ec1f48802012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d010904312204207e112f2a5c0b7d6602462191f34ee28eb9bd9f9402699e54dfb31c8576d59308300a06082a8648ce3d04030204483046022100ba6dd69c43f86fb04c7c7728a8c3f4804f7256231be7930ae97c22882ad916dd022100e21f446917e52fb13acb14e5f110e589e72140a064b5fa879929a43bf01e0c1e",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1314,7 +1366,7 @@
     },
     {
       "name": "alg 2: the certificate of the signer twice in certificates: F6",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1339,7 +1391,7 @@
     },
     {
       "name": "alg 2: a certificate of version 1 that names no signer: F6",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1364,7 +1416,7 @@
     },
     {
       "name": "alg 2: an attribute certificate in certificates: F6",
-      "security_cbor": "a30071646174656b6579732d73656375726974790101025906b6a3000201582381582084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d31025906893082068506092a864886f70d010702a082067630820672020101310d300b0609608648016503040201300b06092a864886f70d010701a0820183308201783082011da003020102020817a4eee96b02780c300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d03010703420004a986a8fbf38687cc9b33e317826adfdbde8cebce8b371ad4446ed8944fb8fb4a25b13681b8f490136711d5b55946c8b64abd13ae5a1d26ec639cc89e54c64d89a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100b568dd629e42e98beddd33b9299d2efb83b47caba7969276dcbacb5441b67dcd022100d5887a4ac170180c9c5fbf0a02c76970730853b2fbe880659ac1f96dccbaea4ca1053003020101318204c8308204c40201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a020817a4eee96b02780c300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420e5346b7763a20d80f7a0ae67d5f32387359677d0dad91e56f0e86d45668d7a4c3037060b2a864886f70d010910022f3128302630243022042084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d31300a06082a8648ce3d040302044730450220649f9f0735fa96d1620e57b23becaddb8d4b244ee1507e6fe7010899166d9ff7022100eb1ed2cb29d7a8827bc5281c1e847abbf2ef317a7c5db7cf34265ab07eca011fa182039930820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420b85586e1dd8bd2df2815ce1d9bb744974c8d832672346d189ca6163f5055a0c502012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420a390db14a6430d36733ded33def6695ab100973feb57bc3c9212af47f23ea5dc300a06082a8648ce3d0403020448304602210084982d4e81ccbe1916aaf65299f12b96cda3558c23b52c4b29ce4d3789b02784022100c883de7803ed70199d421c3f34f7636a53dca41fe11c3a104998f287afbd2d84",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1389,7 +1441,7 @@
     },
     {
       "name": "alg 2: an OCSP response in crls: F6",
-      "security_cbor": "a30071646174656b6579732d73656375726974790101025906c1a3000201582381582084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d31025906943082069006092a864886f70d010702a08206813082067d020101310d300b0609608648016503040201300b06092a864886f70d010701a082017c308201783082011da003020102020817a4eee96b02780c300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d03010703420004a986a8fbf38687cc9b33e317826adfdbde8cebce8b371ad4446ed8944fb8fb4a25b13681b8f490136711d5b55946c8b64abd13ae5a1d26ec639cc89e54c64d89a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100b568dd629e42e98beddd33b9299d2efb83b47caba7969276dcbacb5441b67dcd022100d5887a4ac170180c9c5fbf0a02c76970730853b2fbe880659ac1f96dccbaea4ca111a10f06082b060105050710023003020100318204c7308204c30201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a020817a4eee96b02780c300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420e5346b7763a20d80f7a0ae67d5f32387359677d0dad91e56f0e86d45668d7a4c3037060b2a864886f70d010910022f3128302630243022042084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d31300a06082a8648ce3d04030204463044022018c7d86d37a928d13ddeb3687b0d8641b87512f0f02185363ed1600fd097194302205e60fd7e996fce64ea95ea19f1067a561a2b3d69d6553b3fec8820e96e117b59a182039930820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042058bbbea716ea105fa2b8cdc7da49475ea921376fc44328e8769c1575130f794602012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420a8efb4472271f746fe8e9cbc48e6b760efd88e9c0f3fe362f330cf3fe458e81b300a06082a8648ce3d040302044830460221008caf1b4d2a92e772b9b54fae9fa19f18e7a33d5aac744a1484843376a284f160022100d3af3771fda81cb595a3209ba5c0ef27680aec643deb76c5de9ac6ec88bfd4ed",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1414,7 +1466,7 @@
     },
     {
       "name": "alg 2: a certificate whose own signature is not one: F6",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1439,7 +1491,7 @@
     },
     {
       "name": "alg 2: a NumericString in the subject, which is DER: F6",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1464,7 +1516,7 @@
     },
     {
       "name": "alg 2: RSASSA-PSS with trailerField written: F5, not verifiable",
-      "security_cbor": "a30071646174656b6579732d7365637572697479010102590930a30002015823815820a7c9f84f9e93ea8c9e935b30dde117eb76471da44f7e45f2696c393f614e86ba02590903308208ff06092a864886f70d010702a08208f0308208ec020101310d300b0609608648016503040201300b06092a864886f70d010701a082030a30820306308201eea0030201020208325566517f129f8a300d06092a864886f70d01010b0500302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a30820122300d06092a864886f70d01010105000382010f003082010a0282010100b25cb0a3f54aa8487b15fba355e38dd4b68183fad4925688c195529caba202127232fd41e799960260f05b120a89703feae05d8725661e3e156b7243158c70a9afe71390a8e29e8afd792458fdecc752403b55c0af444012defb62055e349180e787f0605771744e9ba71049fbe78b153b0bab73d62debed2ef88979c6d6877591a09daf186279973b9a1d9cdbebc0838b220378577b639e601086d79aa7b0bc3a19dce14cdc7c176bd93efa74c1b56256edaa4efa66567772e4f8f6d3a602524664e485399b159a09a69b4dbf6ba5adbb62835dbb0379ca948103cb7715f889f48cb871c5a704f2a9ff6a4d7ea1e89acd02344743210955441f6b3c99cc92170203010001a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4c7569732047c3b36d657a300d06092a864886f70d01010b050003820101006e5267bb69fbfa581dc0bb3b2e54a394a67d8b432b575dff6593cf09350e40a238720585329acf2807779c1da6473d551ee6dc3d81e8379052b9db1b26c74c302fd3f9601c62aa2ff34ec6c6dcf234728b889bc2463875d03ae8563b751380f6a4d0d554ef9cf7b520ad3a523f794739b72f398cc73d1a7f8cf8d21a24c5c994a102993be83ba0bc0968cb43b9b719a3226d22e310ee4dbdff8a74b4ea328d8f6296d0c1500c1332fa012d67a9fccb5c99ebab7a2119d960e51a1ef80d694f6c1f1afda9f42e18058873ef91cf851352e680aabd5e541f2a3ddf6d196b76be26d03b2e173daf290144d7e489679aea10acf91301b8c93d79bde85cfcbdd391b1318205bb308205b7020101303a302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a0208325566517f129f8a300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420545ade85714b87a7ba396029179031b9e8ef8e8d0078fb5e4e4bd09bea49ea6d3037060b2a864886f70d010910022f31283026302430220420a7c9f84f9e93ea8c9e935b30dde117eb76471da44f7e45f2696c393f614e86ba304206092a864886f70d01010a3035a00d300b0609608648016503040201a11a301806092a864886f70d010108300b0609608648016503040201a203020120a30302010104820100a4cdf692f53e5f81a29faea22c631dbd6d7c80a3920c51f3faaeababffd928d7e7a4168baa849707dd34dbdf5514066a7e364dc6659cd33953de9e516867e3db3123db436237e6b084d82a5401dd60b66f3112823b6fb59c73213692c2f3cd0dfb154611b3753671316182ba9e33a9323e70beb3a3c3c065e2b8e1beb3c300759eec63e5991fdf0f37d85fe64278c3239f7883abc7324a5fdef2b76b35eef478d9f35d938f5c0cc5874bf15d9661eac8cbdc22e78d5d341ec873836f641b25d6531e6a5356a1776cd7cb00c0c813a9ed697b706ab4a300386ac6f0976c5af9230bcfeb99ad7ad83e64f1fb244f042d8e5e59cc3f0f40eb52ac9b93e6b31ed942a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042015bb510f6037315d5e41f2630489ce193279fc0f185d0f36ca6479a260569f8d02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d0109043122042033604f0feffdc63be57cf9dbc6e9f8831fd08895ba12154c2d4d5b5586d2b925300a06082a8648ce3d04030204473045022049f92ed4b27af09173e65fcf88a9767c5391bb0d4c274e43e45ca026876ee07b022100ded3deda574fee71122c9cb8c66c1be53e1bf40bbc3d6afc8cf0976a2696f5ef",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1486,7 +1538,7 @@
     },
     {
       "name": "alg 2: a digest outside the table, SHA-1: F5, not verifiable",
-      "security_cbor": "a30071646174656b6579732d7365637572697479010102590699a3000201582381582084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d310259066c3082066806092a864886f70d010702a0820659308206550201013109300706052b0e03021a300b06092a864886f70d010701a082017c308201783082011da003020102020817a4eee96b02780c300a06082a8648ce3d040302302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a301e170d3230303130313030303030305a170d3430303130313030303030305a302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d03010703420004a986a8fbf38687cc9b33e317826adfdbde8cebce8b371ad4446ed8944fb8fb4a25b13681b8f490136711d5b55946c8b64abd13ae5a1d26ec639cc89e54c64d89a3273025300e0603551d0f0101ff04040302078030130603551d0e040c040a416e61204cc3b370657a300a06082a8648ce3d0403020349003046022100b568dd629e42e98beddd33b9299d2efb83b47caba7969276dcbacb5441b67dcd022100d5887a4ac170180c9c5fbf0a02c76970730853b2fbe880659ac1f96dccbaea4c318204b6308204b20201013039302d31163014060355040a130d446174654b65797320746573743113301106035504030c0a416e61204cc3b370657a020817a4eee96b02780c300706052b0e03021aa078301806092a864886f70d010903310b06092a864886f70d010701302306092a864886f70d01090431160414185f61deecd9878e855e027ea94d3962366ff1593037060b2a864886f70d010910022f3128302630243022042084476858d209c64def278a50ef97305a33c6680a4dcf7ff7339f02d2037b8d31300906072a8648ce3d040104473045022100bcda33277206d779f33f5bb1781920c0bb0442577ebc87413c8c9698bdc3d48f02205ef24281371496cc8f026bc2d5e742f0a7cf546706822d548d6094a67eb6d1f9a182039930820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042067fe625718e4b47b1f1285eb4958826f1ad11b00a94521b7da57f94782acf06d02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420116a08042887231e6f068b7e32ecdb8e33d0a5e923f4cf6a07ef8c215479f6ef300a06082a8648ce3d04030204483046022100f50d5b182f978555ee917a4b236a9420bc363427adac3294e41a704fae7f3fff022100a64a909e7941483fb3573ddd8edb59d73fa9faab9aa1376027c7844bafb44f4f",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1508,7 +1560,7 @@
     },
     {
       "name": "alg 2: RSA of 1024 bits: F5, not verifiable",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d7365637572697479010102590775a3000201582381582053f819f941bf50bfad0b17b1ee2102538933c4a0e39a764d27067b62308903e6025907483082074406092a864886f70d010702a082073530820731020101310d300b0609608648016503040201300b06092a864886f70d010701a0820205308202013082016aa003020102020838404c42036f5ae7300d06092a864886f70d01010b0500302e31163014060355040a130d446174654b6579732074657374311430120603550403130b436c61766520636f727461301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b436c61766520636f72746130819f300d06092a864886f70d010101050003818d0030818902818100a287d1e9998f9565b0050a352cd686d0775b72db84858ab668d2c00adad6c904fc7a6617d986879b140979a03119aa97493af94034842faa5aa28c379154d38935c2e9f7e64758c1661b4b0e3821bb7ba8bed6533dd8ea0f9fb963964942578d9c5b296cd09075440922c2ff653b7b2f64626d679580d7cf7dc80486a792c8ab0203010001a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b436c61766520636f727461300d06092a864886f70d01010b05000381810065a82d71218a6b72761a4da048fa8e03de9f1fc84e22b4b8a996ce07778b73a3d9f1b215c48af78812cff0c59e30fa730aa11000ed9f964fb48201e823837e008c92066be4a335f807c3a29621dcbd0a4fb7e26e1b74397fd20a19d423e773231597e9d74bd1c10a7d223dc4d4232fcb4946afed58357401ea4f8904e025bad03182050530820501020101303a302e31163014060355040a130d446174654b6579732074657374311430120603550403130b436c61766520636f727461020838404c42036f5ae7300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420d79f70aa9f9fa33ad127959ecf8d7b949c22ee490f2c976bddcf85afd110694e3037060b2a864886f70d010910022f3128302630243022042053f819f941bf50bfad0b17b1ee2102538933c4a0e39a764d27067b62308903e6300d06092a864886f70d01010105000481803e2c21419d05755b211252460a724822039993232268574f194bfa92d9b0906cc765f7c5af43ce6ab335e82e9bc029465b164b38a1c116119826110d3ed1b1411bb38ea816af4769143b0247953f534cfeb79bf5b6dc4543b084cdf44a2371f0d47ec4314426211f5df398a4896d4e49293010a2434707c7248cc496ab0e3e74a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420d261aedb130d3a2377c68a70297126870cde7bc319c5f71ebd37d8ce102eeda002012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d010904312204201b0aa63c408306b3e6b5da8ffd96a6dbcbd8225c4819e10dafeb098c89ec8491300a06082a8648ce3d04030204473045022050c54203a5b36026097a385d7db9fb246eb3d915198556bcd1eb77fd2cbc9699022100be9911c3e2f8a9f096a2455eb2265c54937b8dced693b66b386b7dfcd6d6991b",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1530,7 +1582,7 @@
     },
     {
       "name": "alg 2: RSA with an even modulus: F5, not verifiable",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d73656375726974790101025908bca300020158238158207c321d0e09e4441d6a8ed3b89c510639cf5a4e0e4167ae2bec9c9b732fca454f0259088f3082088b06092a864886f70d010702a082087c30820878020101310d300b0609608648016503040201300b06092a864886f70d010701a08202e3308202df308201c7a00302010202082e382e22a7ba2780300d06092a864886f70d01010b050030163114301206035504030c0b4dc3b364756c6f20706172301e170d3230303130313030303030305a170d3430303130313030303030305a30163114301206035504030c0b4dc3b364756c6f2070617230820122300d06092a864886f70d01010105000382010f003082010a0282010100c3b82c98775c53adc65e69a8135e5e14ea3520302df515a296d1061d2c61d6c42be16afb8eb7ce56dfc68f4755ceef83befe27d3468169e4ea2a8a5186e4469a67b60792d2285647875e88dc6ca79699e01c0342665d698d096d217326facf240af5fa568585ecde014c33b69c50dc91c0d46cbb17095dd69243e61873022a50793d0375eda118bd5757ffc91e183417f7d5c38edf1867e8fafae6f9466347d9cf5f77431a3b17bbac1d0b737f11818f1f8500ac7cbe7a0245f0fb2dc2c4c2dbcdb061f70c8305204add83f80c5815547d92ed8af257b8834c76cb1b31b171c6f04eee0845f174b7ac7dde890a7748771c3915cdd7674b2049e7abfb17b135520203010001a331302f301d0603551d0e041604143ed6bedd17de0c2501ac33e652d9b13d8b1c90ec300e0603551d0f0101ff040403020780300d06092a864886f70d01010b0500038201010013314b8efaa336ee144ccfb9035d22c4812d9bab8288af6d7523e61d30395593c93eeacef024114d4fb712887c86bab767db08a8f84cf180049571bf623d3d7041965eb6db66b62a471ec4b60e9487e60ae18d36c9d4424af34f3e36b4315e1d8de32e1258ca60339ff2038980eb391c51e392968a35df427fd191c598ff03da89465ee7668fb8b59d8424daa00f62abfc3f2f2bf02c2834a30ed083bb110f0aa6930b7110f34a3c20046e52b99cc887099081d26fe8c3c91cd43711ce2ad6ae5dcea30212afb709e2a046030cae02956fd731111d55577bdb1c20b9090f0a76f91aa0e599fe96bb8b5fbf6dc0be0fdc4cd7b449a20e21328a81f99a4427f9213182056e3082056a020101302230163114301206035504030c0b4dc3b364756c6f2070617202082e382e22a7ba2780300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420e87b57d072291a35874c12844ee18d8b32bfe471cb1414e6037ba600b2a16a483037060b2a864886f70d010910022f312830263024302204207c321d0e09e4441d6a8ed3b89c510639cf5a4e0e4167ae2bec9c9b732fca454f300d06092a864886f70d01010105000482010016eba722e3053579e908e6f1aa768687fd3d3cb7ff87d97241e064f3ab23e3e365efec141c3e5089eb9ad9e94d7aed43513d5ac5ac5fb21bde2dd89edb15f39fe0f119bd19fe7e5015e864594959e1676d19c407bd514a7862881321ce1b1a77917a1e25787bf5e58575bdb4bdd47d1f79a72f1c4851021bb47dad9b6188948ecb5b2fa3f8094ecfa6ad81aa39e433a2454f303528130d7dcd1dbc4282ca91afff2fc1d565d6ebe168e3801f75822624a64566f614886a91c599a4efce06ef7dd5c5be641241e8ca7d0e81fe7fd4140bdbda5ca07cc583036350e6475faa588ef0082cc182670287c0ba13977d13a29483c31c1a53007564fd8f92663485aafba182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104203e507093c6e1c8a3d5e9113411b2aca21c171861d228a66769b719a5c6b05d2b02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d0109043122042086b54b0f02ccb3fcaa3d5252a55a252547a2a4e95d125d5c946c546203f0e380300a06082a8648ce3d0403020447304502207744fe3f7f58e9d8a9a4e696699bb1572056c81a0930685af931a2dbf6f06c1a022100ee7735b34bdb46a5ccce1709e57a531dfc046af6dd020f8a3fc87518e1617414",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1552,7 +1604,7 @@
     },
     {
       "name": "alg 2: an EC key compressed: F5, not verifiable",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1574,7 +1626,7 @@
     },
     {
       "name": "alg 2: a key on brainpoolP256r1: F5, not verifiable",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d736563757269747901010259067ea30002015823815820a56b2fc117d1adde48fa32b44d0afb34f4022f424a523d2b73fe4b4c55c27049025906513082064d06092a864886f70d010702a082063e3082063a020101310d300b0609608648016503040201300b06092a864886f70d010701a08201603082015c30820102a003020102020815c7926efea565d0300a06082a8648ce3d040302301a3118301606035504030c0f437572766120627261696e706f6f6c301e170d3230303130313030303030305a170d3430303130313030303030305a301a3118301606035504030c0f437572766120627261696e706f6f6c305a301406072a8648ce3d020106092b240303020801010703420004485f3f6e4ac1c9c8359ac2b73dab366fd02df5e868fad777738dd8accb776923209044211b38a4c5af0044515159431eefee20e5fcbe4fd5bd3993fb34ffe002a331302f301d0603551d0e041604146218fc60d43c341a510f67768f97975185da4cad300e0603551d0f0101ff040403020780300a06082a8648ce3d0403020348003045022100ed55558d62a7caea0e32e85c71d4acd461d0c1230e902063785359caf6d2571002204b653ac8a4324a355ad7de699495b96799404ea646a07eaef2367aef72af79c7318204b3308204af0201013026301a3118301606035504030c0f437572766120627261696e706f6f6c020815c7926efea565d0300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420f9b724f2241d5cd32284d4010bcf746d269b1c9af4676135fcb5cc8c63e214a83037060b2a864886f70d010910022f31283026302430220420a56b2fc117d1adde48fa32b44d0afb34f4022f424a523d2b73fe4b4c55c27049300a06082a8648ce3d040302044630440220738e83e27fa2a906d281e897e664c8bddf2e3bc13c32d03d6530eb4efb501dde0220285f058b9208ee36ad3e14a7b528c48ea2c2d37b668735bf39e286a948f67747a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042091c80ddeca6fa721cfa6b52c99cf6e2d6b44606b2049f40e35269a4c14851c7b02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d01090431220420ac3a7a60d2a646fdc80958c1dd09c8c90b5c23b081f95ab9a0df59b0143d66c3300a06082a8648ce3d04030204473045022100d9ef87b716392641dd9912b98b54efd7f386aba57630411f8fb84ebd35c54d6e02204a8c1fd3de9213ebde3d3c07c6a2f675eeee219f4f2035a6c71721f19ea3b8f3",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1596,7 +1648,7 @@
     },
     {
       "name": "alg 2: an RSA key with an ECDSA algorithm: F2",
-      "security_cbor": "a30071646174656b6579732d73656375726974790101025908f8a30002015823815820a7c9f84f9e93ea8c9e935b30dde117eb76471da44f7e45f2696c393f614e86ba025908cb308208c706092a864886f70d010702a08208b8308208b4020101310d300b0609608648016503040201300b06092a864886f70d010701a082030a30820306308201eea0030201020208325566517f129f8a300d06092a864886f70d01010b0500302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a30820122300d06092a864886f70d01010105000382010f003082010a0282010100b25cb0a3f54aa8487b15fba355e38dd4b68183fad4925688c195529caba202127232fd41e799960260f05b120a89703feae05d8725661e3e156b7243158c70a9afe71390a8e29e8afd792458fdecc752403b55c0af444012defb62055e349180e787f0605771744e9ba71049fbe78b153b0bab73d62debed2ef88979c6d6877591a09daf186279973b9a1d9cdbebc0838b220378577b639e601086d79aa7b0bc3a19dce14cdc7c176bd93efa74c1b56256edaa4efa66567772e4f8f6d3a602524664e485399b159a09a69b4dbf6ba5adbb62835dbb0379ca948103cb7715f889f48cb871c5a704f2a9ff6a4d7ea1e89acd02344743210955441f6b3c99cc92170203010001a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4c7569732047c3b36d657a300d06092a864886f70d01010b050003820101006e5267bb69fbfa581dc0bb3b2e54a394a67d8b432b575dff6593cf09350e40a238720585329acf2807779c1da6473d551ee6dc3d81e8379052b9db1b26c74c302fd3f9601c62aa2ff34ec6c6dcf234728b889bc2463875d03ae8563b751380f6a4d0d554ef9cf7b520ad3a523f794739b72f398cc73d1a7f8cf8d21a24c5c994a102993be83ba0bc0968cb43b9b719a3226d22e310ee4dbdff8a74b4ea328d8f6296d0c1500c1332fa012d67a9fccb5c99ebab7a2119d960e51a1ef80d694f6c1f1afda9f42e18058873ef91cf851352e680aabd5e541f2a3ddf6d196b76be26d03b2e173daf290144d7e489679aea10acf91301b8c93d79bde85cfcbdd391b1318205833082057f020101303a302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a0208325566517f129f8a300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420545ade85714b87a7ba396029179031b9e8ef8e8d0078fb5e4e4bd09bea49ea6d3037060b2a864886f70d010910022f31283026302430220420a7c9f84f9e93ea8c9e935b30dde117eb76471da44f7e45f2696c393f614e86ba300a06082a8648ce3d04030204820100865628527a8a7419b5d679d3d28a3fa193b30231e2df43126ba8cc6c12e1b2c76ca7465f5de07b21668a19f4a31866ca9329e9af360f20128338294c295b295cd9108f279359d6c554a74d5289d211230936c83e95c567b1e209584948c05e225386c3a7ea73c100be1f5784c0e04139136ccae9d08337daa4126b6171799fa16e0cd7bf402253f28b0a49e1a59ca3fd32b585bf5b471a8a8f625622d2a3c3b318beb216f1965151772658f4f0f5633411a305d4757004c72b062a0a3553b4f7693cfcd6efc22ff841f0dc16b5ac5930fd7580b2ab3eadbb1da5723efdbbfd4a3359bd7ea5f7283086b4fe4c72dcbb954c22dc78af3f3db33a5210569909eb06a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104200522d6b0d172a5af580801c20890ea49582a7a33f632ee599df0693b285f2b4b02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d0109043122042053c758c425301a95614aaa13cf0063785438e5be48c7d932101f5d2354d4959d300a06082a8648ce3d0403020447304502204d406bf7bd6b376a6501f028883f371fb707ec375e81220e3bdc5e5c21f56c27022100c85bb450b7444afd65a4aae8af20e02d819f45788cc628817bd15b33f7b7483d",
+      "security_cbor": "a30071646174656b6579732d73656375726974790101025908f8a300020158238158207fba28a1f26f9d52a50dcd705e32f5f57d5a8979adc3ef96517d4e93f2c6bbb2025908cb308208c706092a864886f70d010702a08208b8308208b4020101310d300b0609608648016503040201300b06092a864886f70d010701a082030a30820306308201eea00302010202082a7dfd68e3c33d6b300d06092a864886f70d01010b0500302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a301e170d3230303130313030303030305a170d3430303130313030303030305a302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a30820122300d06092a864886f70d01010105000382010f003082010a0282010100c84c42651353f447c5408f7fe6771a1c89138ed7f392f9c061b506e28237feea96a2385469bb723efea846eef79f15d2c2c50e613cb5d27e672470429759dc0b1b6d4572972d40fa36c6ee21c517ae76f524c26c4e482ed7596154b0388eef7c8a95c0b8c7cafca5fab3362ada502df8610c66647e31f95e6fc7ce52e4a1dd2051ba291f18f957286ce170f9526da17a47578ff0db76aae22c54f87af93ab0f7e436dea99fde8d394a94b75d74dc96b9dd7610fb7980a66a0cc4286c8767e16c19d609cf32521801f5c36f2e146cc4b0ed0e33ecd7b57aaa8d713a92433070a86de8c16e616bee3ca9159ad4905081ba2a9254af41d314b447b997f5c1ac147b0203010001a3283026300e0603551d0f0101ff04040302078030140603551d0e040d040b4c7569732047c3b36d657a300d06092a864886f70d01010b0500038201010083af0ea7090022bacdc5564befc93b63748162b01c3785d5e0236f6c1b75c072856b3bb6b908659c9bd09c570b228a43fe9235c9d3a5b36e1a444048dce34c67ed7881fae1e94c360a1f5ea596922cd10cb9d5e22f26a10db65013276af31f5717faf12350558935118ed40468b8e1bfb80561129975f4916df85fcb32aff98f6243eb405c4c7f261c272644976de92daa11731860d80103c2c29caef4f2cc6467988021edebcd2e7b673f9b708a50a61907c77553e66d6748ab042f336ccbdf92fe21d260fd888c19f8ad4155743bb96dfdeae9fa07a46d559639189d42411e4653fc0e808c2931e8ce63cd9e3097780c06c1e3a73fe6189538b1c95d968e05318205833082057f020101303a302e31163014060355040a130d446174654b65797320746573743114301206035504030c0b4c7569732047c3b36d657a02082a7dfd68e3c33d6b300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420e4d904a8c5eca500b9fd8d0f0f1c20963b665f5daa182f24fddc720b3c3ec8c13037060b2a864886f70d010910022f312830263024302204207fba28a1f26f9d52a50dcd705e32f5f57d5a8979adc3ef96517d4e93f2c6bbb2300a06082a8648ce3d040302048201002674f4caee71287625b4319f371fc1141414d6e820fb04e04a43dabebe2e207a45b1bf5f43180c8aee38f05cacce6510bf649686472c7817fb6124f8840141c75b8f14b7777156ed58680094446e26ed65ae5b390adf34a5349e883f1273a4917077a2fd04c626ee7545fd12db826d49a082b016b877dde2c33795c0e1b829fabddcfcdf2c85bf1ae1a2caf08e821eda71a6a2e2b137856ff3f662c0794f915fb32bf23c7deac12aa245326c2eef7c73070ef6d108e82eb9ec743ad1dcfcdd45329dfc888cfbc15d85236aa3dfa054f32bd552c55879abff8385b066d63bca9561a1c2c238fc3b854af0e55f654ead18bde955a374c156cc358f5265e54d4db2a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420c54dcde8c9dc238be847abab26831e259e3e492f585755b9fcc45fb55174c25f02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d0109043122042075c8fd77f65bcf92798273292d2bd52c0b8287d1621d987adf702403d65c637e300a06082a8648ce3d04030204473045022100b674d65452277a97921e4c7b6b9b9c102db7b3155153ab5ddaf969ae3280628b022067c6c09d73b310ed180b15778a772d0ae4dab5095babbb14eda7124efdd458d2",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1618,7 +1670,7 @@
     },
     {
       "name": "names: a commonName of 64 code points, shown",
-      "security_cbor": "a30071646174656b6579732d73656375726974790101025906eea300020158238158208c75b1a9defb70dac9f2571cd9bf30c71ef74f2ceb3c55f9a1918e39f4ff670b025906c1308206bd06092a864886f70d010702a08206ae308206aa020101310d300b0609608648016503040201300b06092a864886f70d010701a08201d1308201cd30820173a003020102020828c30036dac937c0300a06082a8648ce3d04030230173115301306035504030c0c434120646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a30818e31818b30818806035504030c8180c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b13059301306072a8648ce3d020106082a8648ce3d03010703420004cc617a97914ea95163d70c8b778147837b238760c9586042fc6943af67df4072e3b137fb86e31319b35bb9a6fbdfabec00dc285db0168559d34c12d8ca0264aea331302f301d0603551d0e04160414f1f57fb1e5080453f25f9b337bbb60a4c1418cd8300e0603551d0f0101ff040403020780300a06082a8648ce3d0403020348003045022100ab6a5de1cd1d07b3af72e99afc9dd3dc852e46ab1ccb375587bb4cc6fa2d0455022043317855299f71aa69cf76edbc219a4b7f46ee2be02befb707c03e9a368f9cbc318204b2308204ae020101302330173115301306035504030c0c434120646520707275656261020828c30036dac937c0300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204202df3d1a95ffad6cda344dd261982ae11466ea1dd2a7b904ec42fb4c2c469ec333037060b2a864886f70d010910022f312830263024302204208c75b1a9defb70dac9f2571cd9bf30c71ef74f2ceb3c55f9a1918e39f4ff670b300a06082a8648ce3d04030204473045022100bc98d57b856983a800a59b3eec8d42fa0b7b6a643a84c578b92b8bcb838c8105022004383aa1fd43de9da1123c97171b6e5b810d4bf6d62d302215123869c8d40d74a182039930820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420e8795383fb37af54c3f9d30f7684b3adff138c0cf43a76fb08b8d03a3c183de502012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420a7cfb03a9a03c48e139b65aac6802aeb2e98957fe53edc42347c2c1a742227a9300a06082a8648ce3d04030204483046022100d7df883ae8a4836cbd8ff1c62de6584e6fbd25a58974ba8ad857e8c71c288067022100dd513457ef0602e97075f3385e372db7603a097c070953593da73b799d33a1e8",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1643,7 +1695,7 @@
     },
     {
       "name": "names: a commonName of 65 code points, its SHA-256",
-      "security_cbor": "a30071646174656b6579732d73656375726974790101025906eca3000201582381582059f43d6b2f8fdc680edb8c3c00972a690324b9d0d7a1eabdb5fe3732f708d9c9025906bf308206bb06092a864886f70d010702a08206ac308206a8020101310d300b0609608648016503040201300b06092a864886f70d010701a08201d1308201cd30820174a003020102020823460cf2c6d62368300a06082a8648ce3d04030230173115301306035504030c0c434120646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a30818f31818c30818906035504030c8181c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1c3b1613059301306072a8648ce3d020106082a8648ce3d0301070342000441c8e0e6055c64ee53690e40e243971449409af892b8b9d55ce704cf6ec314e5ca374ef86e707ad9897239dbb14cfa8a6f11a2f4eeb4be790818619ce9cfe674a331302f301d0603551d0e04160414652cd45d9dbdc8201a546f50ec127dfdb5d2611c300e0603551d0f0101ff040403020780300a06082a8648ce3d0403020347003044022014e13a8005e54c547197d89c65d34c897f365a17925d040f4cc246900620c4ef02205f483b0f9cfd98d31e0823d1f9ccd5d85e84535224c0a0a341f78dffd9f9c0a6318204b0308204ac020101302330173115301306035504030c0c434120646520707275656261020823460cf2c6d62368300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204207c5f77e297cde92bb5621664998d6ffcb5c71f729bc74bfe3229e9dc8859dc2d3037060b2a864886f70d010910022f3128302630243022042059f43d6b2f8fdc680edb8c3c00972a690324b9d0d7a1eabdb5fe3732f708d9c9300a06082a8648ce3d0403020446304402206ec7714967dc122fadab93308bb334b846d16d3af305b164aeb7f73462071f6702207cc7f9db84fc8c1dae9f6b4b60fd074664c73d9401dda4683df4414df289e5e0a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042031a86d378496bedb091f1a1000fa37ace27775df00d341d59e72dfef826c52ea02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204200ecf93a2c09f9e0aeed1e9051b086bfc9571ac8b6c6cedd07724b31eeaca12c2300a06082a8648ce3d04030204473045022046a14c1ba7a7ee9a45f043da7e75cfbbcaf41ec51afe467938227bbd2905bf21022100d831898e7487029885c2053a27dee66721fe53ebe453083e7e9179672ee93808",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1653,7 +1705,7 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "59f43d6b2f8fdc680edb8c3c00972a690324b9d0d7a1eabdb5fe3732f708d9c9",
+          "holder": "2181856bbc613df40285760261dc6abbc8875770845bcce7d3a3fe367187407f",
           "issuer": "CA de prueba",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
@@ -1661,14 +1713,14 @@
         }
       ],
       "lines": [
-        "Firmado con un certificado a nombre de «59f43d6b2f8fdc680edb8c3c00972a690324b9d0d7a1eabdb5fe3732f708d9c9». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «59f43d6b2f8fdc680edb8c3c00972a690324b9d0d7a1eabdb5fe3732f708d9c9» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "Firmado con un certificado a nombre de «2181856bbc613df40285760261dc6abbc8875770845bcce7d3a3fe367187407f». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
+        "  «2181856bbc613df40285760261dc6abbc8875770845bcce7d3a3fe367187407f» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  DateKeys no comprueba quién emitió los sellos."
       ]
     },
     {
       "name": "names: two spaces in a row, its SHA-256",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1678,7 +1730,7 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "238546d8567ba3865979ef19b116b1ec79613e6ffc185caec739f423d81e8ef3",
+          "holder": "6afc3477ebe91931e67dbbe791b713cc0a9b5e827f430305684b84e3845b8819",
           "issuer": "CA de prueba",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
@@ -1686,14 +1738,14 @@
         }
       ],
       "lines": [
-        "Firmado con un certificado a nombre de «238546d8567ba3865979ef19b116b1ec79613e6ffc185caec739f423d81e8ef3». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «238546d8567ba3865979ef19b116b1ec79613e6ffc185caec739f423d81e8ef3» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "Firmado con un certificado a nombre de «6afc3477ebe91931e67dbbe791b713cc0a9b5e827f430305684b84e3845b8819». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
+        "  «6afc3477ebe91931e67dbbe791b713cc0a9b5e827f430305684b84e3845b8819» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  DateKeys no comprueba quién emitió los sellos."
       ]
     },
     {
       "name": "names: an escape, its SHA-256",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1703,7 +1755,7 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "6f221fd7d619c20a32c91f5a9fde0c64f106c3d9239da4b9837ae759d2a78cd0",
+          "holder": "ebffb26dea97d43a363fbf49bf8f61059aff99aabd5149158f58571459526e9d",
           "issuer": "CA de prueba",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
@@ -1711,14 +1763,14 @@
         }
       ],
       "lines": [
-        "Firmado con un certificado a nombre de «6f221fd7d619c20a32c91f5a9fde0c64f106c3d9239da4b9837ae759d2a78cd0». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «6f221fd7d619c20a32c91f5a9fde0c64f106c3d9239da4b9837ae759d2a78cd0» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "Firmado con un certificado a nombre de «ebffb26dea97d43a363fbf49bf8f61059aff99aabd5149158f58571459526e9d». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
+        "  «ebffb26dea97d43a363fbf49bf8f61059aff99aabd5149158f58571459526e9d» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  DateKeys no comprueba quién emitió los sellos."
       ]
     },
     {
       "name": "names: U+202E, its SHA-256",
-      "security_cbor": "a30071646174656b6579732d7365637572697479010102590675a30002015823815820a5ea1cb23b2c610048375c213b2d62f4253e45ce56a87d8de2e34d5d1e24f732025906483082064406092a864886f70d010702a082063530820631020101310d300b0609608648016503040201300b06092a864886f70d010701a0820159308201553081fca003020102020826b467a4e5692c87300a06082a8648ce3d04030230173115301306035504030c0c434120646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a30183116301406035504030c0d416e6120e280ae7a6570c3b34c3059301306072a8648ce3d020106082a8648ce3d0301070342000483e0cefa1113ef2298a2871fe53acae08bf8b35493db715b303b4b7d48448b3161457584d47bd52fcbbdf00f7a99746a305f1f0aced72a078887bec44769699aa331302f301d0603551d0e04160414518309084534657ae20689c4569faef730716ce6300e0603551d0f0101ff040403020780300a06082a8648ce3d040302034800304502200c3f6a6ad2b7c4f28956f06a876e5a8204e2787bf5d1fd3b202e1575fff211f402210096bf478202639f4488a319c465e9f029e8f08cd02b43afe2f69e2f676e07dbd8318204b1308204ad020101302330173115301306035504030c0c434120646520707275656261020826b467a4e5692c87300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204207cf6ea64ba91bf3b491521785a795cbbdb1c5eabc6c4c93f93cf4b4c8a8f92423037060b2a864886f70d010910022f31283026302430220420a5ea1cb23b2c610048375c213b2d62f4253e45ce56a87d8de2e34d5d1e24f732300a06082a8648ce3d040302044830460221008117a24a6be29b9f5c373d4a428c94642f79794bc6e87d90912e8d5d0b275606022100d65ada6faa3c880ec7291ad10d536da0f61cacd2699fbd3920f0d52513d96189a182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420d0921df8b4ce800e7ad603a3ddccbecfd535226a2294f31dee041788d5148d4202012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d0109043122042026989a1552e0ca2ea2f132acd23289f5d0353af74982594ecf5adf82043e3325300a06082a8648ce3d0403020446304402206a97592e02eeae7843f48f9c952e6754145d7ebe7007975659d5683c1f6aece00220342b062f01f96414d4c0996d46cdec4b1cd97d951869d4c42840dca66d1ab3f0",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1728,7 +1780,7 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "a5ea1cb23b2c610048375c213b2d62f4253e45ce56a87d8de2e34d5d1e24f732",
+          "holder": "4fbeb9f43d24cf3163e85c96a987e640d7a266b636b65aeffcd8e0d4b6342ef1",
           "issuer": "CA de prueba",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
@@ -1736,14 +1788,14 @@
         }
       ],
       "lines": [
-        "Firmado con un certificado a nombre de «a5ea1cb23b2c610048375c213b2d62f4253e45ce56a87d8de2e34d5d1e24f732». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «a5ea1cb23b2c610048375c213b2d62f4253e45ce56a87d8de2e34d5d1e24f732» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "Firmado con un certificado a nombre de «4fbeb9f43d24cf3163e85c96a987e640d7a266b636b65aeffcd8e0d4b6342ef1». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
+        "  «4fbeb9f43d24cf3163e85c96a987e640d7a266b636b65aeffcd8e0d4b6342ef1» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  DateKeys no comprueba quién emitió los sellos."
       ]
     },
     {
       "name": "names: a byte order mark, its SHA-256",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1753,7 +1805,7 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "7d7565a79e64b75e7ad84488f0e4fbf4298b24112fe480713f189a34cda6581d",
+          "holder": "b70905bd8a166495a949aa296889fa22a89a3e9e204f7c146c01baed8a973c70",
           "issuer": "CA de prueba",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
@@ -1761,14 +1813,14 @@
         }
       ],
       "lines": [
-        "Firmado con un certificado a nombre de «7d7565a79e64b75e7ad84488f0e4fbf4298b24112fe480713f189a34cda6581d». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «7d7565a79e64b75e7ad84488f0e4fbf4298b24112fe480713f189a34cda6581d» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "Firmado con un certificado a nombre de «b70905bd8a166495a949aa296889fa22a89a3e9e204f7c146c01baed8a973c70». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
+        "  «b70905bd8a166495a949aa296889fa22a89a3e9e204f7c146c01baed8a973c70» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  DateKeys no comprueba quién emitió los sellos."
       ]
     },
     {
       "name": "names: a line feed, its SHA-256",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1778,7 +1830,7 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "b73649447e2741f656954d1d0fc93d5aeac826a943ce12071ccbda12b5d4a7c6",
+          "holder": "895174e665b2a83c62e0ee6c0b15df0596ed3957389ced39d6f5d31f8b125391",
           "issuer": "CA de prueba",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
@@ -1786,14 +1838,14 @@
         }
       ],
       "lines": [
-        "Firmado con un certificado a nombre de «b73649447e2741f656954d1d0fc93d5aeac826a943ce12071ccbda12b5d4a7c6». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «b73649447e2741f656954d1d0fc93d5aeac826a943ce12071ccbda12b5d4a7c6» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "Firmado con un certificado a nombre de «895174e665b2a83c62e0ee6c0b15df0596ed3957389ced39d6f5d31f8b125391». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
+        "  «895174e665b2a83c62e0ee6c0b15df0596ed3957389ced39d6f5d31f8b125391» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  DateKeys no comprueba quién emitió los sellos."
       ]
     },
     {
       "name": "names: givenName, surname and a commonName with the NIF, the name without the NIF",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d73656375726974790101025906dda3000201582381582023ce313db33de6cb2ee2ee563efbea942372b2d4442ad98c0400aba37b325844025906b0308206ac06092a864886f70d010702a082069d30820699020101310d300b0609608648016503040201300b06092a864886f70d010701a08201c1308201bd30820163a003020102020835e2a59e045d8d1d300a06082a8648ce3d04030230173115301306035504030c0c434120646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a307f310b3009060355040613024553311830160603550405130f49444345532d31323334353637385a311a301806035504040c1145535041c3914f4c2045535041c3914f4c310d300b060355042a0c044a55414e312b302906035504030c2245535041c3914f4c2045535041c3914f4c204a55414e202d2031323334353637385a3059301306072a8648ce3d020106082a8648ce3d03010703420004b8982dd93f138c5191f778eb71b55b17df66b031b80701742cbecbb43d8dbae85919538ffb029fdc5ce36a290186c0648a7789d736d8154bac644a4d806b9e98a331302f301d0603551d0e04160414b8797b6235218b57f11ad11cd4becd0cf1bdfb70300e0603551d0f0101ff040403020780300a06082a8648ce3d040302034800304502205f98b274e0ccac9e4cb56713832b312733ceb5f99a67145684370dfe1ef5ed2102210092e9c963a68f181d9c0bb345d100783dd9629aa6d4b330e113ad004c0642b0b7318204b1308204ad020101302330173115301306035504030c0c434120646520707275656261020835e2a59e045d8d1d300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420e8fc984810d23ed7d2f2d93392aa96da20f2f0a4dbfaceeb1ee947c5bdcea3123037060b2a864886f70d010910022f3128302630243022042023ce313db33de6cb2ee2ee563efbea942372b2d4442ad98c0400aba37b325844300a06082a8648ce3d04030204463044022005400e6be6905665313c72cecc3d620aae2b1ff79fac8c03a6ed5bca4d29152d022063b88f9ea5a188e16a3169e283c01c24985851e87ece5b5d86332daec9dea449a182039930820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420900be9bb1e51ab3c061e7d8d6ecc457b562ebd9913323bed64f0d4df13d45f3a02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d010904312204202585ac090148b8497e385d3aba7635d85fd421fcd0f1e1520cb73123af7daa71300a06082a8648ce3d0403020448304602210095da36ba8b4356ef00608359973a72a0979542a8054574383c3989fe1c32fef9022100ee136d2efbad05a81037f77d01327ef0849b7046a057ad1501901bf1917695ea",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1818,7 +1870,7 @@
     },
     {
       "name": "names: a commonName in a VisibleString, no text: its SHA-256",
-      "security_cbor": "a30071646174656b6579732d736563757269747901010259066fa300020158238158206d11ef317224927fbf5a7fc47b9b3d9055cf1a23ccdbbd6d67d64c1bcc9cf583025906423082063e06092a864886f70d010702a082062f3082062b020101310d300b0609608648016503040201300b06092a864886f70d010701a0820155308201513081f8a00302010202083b9f2fe9769baed0300a06082a8648ce3d04030230173115301306035504030c0c434120646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a30143112301006035504031a09416e61204c6f70657a3059301306072a8648ce3d020106082a8648ce3d03010703420004943ec4c6484457048e288d6ce2e6208cfa15fcc70220b2ed25c79a6f39dbb9eb780f900fbb06fa0ac03ad1e64412157e7ce5bea241155b0adf7a60f5c63121f7a331302f301d0603551d0e041604143be2e91d44c53deeb907bfba27f824e1786bc43e300e0603551d0f0101ff040403020780300a06082a8648ce3d040302034800304502210086320ad899fc47e9b13c570a04db9a17c27437f8a55ca6d8531331c29074033e022032f3d639f79604db32a2e85f49443f450c376ae3946d1aa64c257a741e21acc9318204af308204ab020101302330173115301306035504030c0c43412064652070727565626102083b9f2fe9769baed0300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420df56f258c598f585bf51a7f87b7d33c154d7ddc8b1424cda5365bd968435eb4b3037060b2a864886f70d010910022f312830263024302204206d11ef317224927fbf5a7fc47b9b3d9055cf1a23ccdbbd6d67d64c1bcc9cf583300a06082a8648ce3d0403020446304402205d0e7d5ee6969418367e214f21825704f64920f6bcc783da09be63794606a720022067a9fa0ffaab8893ee61c62cd570573259ac19fead876f4b46778ff721d041e0a182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420b0e385927f75f10774214c3776c57660f9ec448b70d27c00f65314307e13245302012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d0109043122042040d02bb836d2bbe5d0c61d63ba4d0e9572dd7b49224d85a01320e0cb3bf755e9300a06082a8648ce3d04030204463044022071834f61e706e9d59160e8cf9e07491ce2571f32aaa135ad9ba7673dda871227022047e437692d73010183ee4b67233d145b78541991b054e7304b5df3bbc2d0bfde",
+      "security_cbor": "a30071646174656b6579732d7365637572697479010102590670a30002015823815820b0be4c6763cae673fabdfebabd06f0dcdb6a5b4d2cb7ab6779a9345d07b78f36025906433082063f06092a864886f70d010702a08206303082062c020101310d300b0609608648016503040201300b06092a864886f70d010701a0820154308201503081f8a00302010202081736f9add46ce60c300a06082a8648ce3d04030230173115301306035504030c0c434120646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a30143112301006035504031a09416e61204c6f70657a3059301306072a8648ce3d020106082a8648ce3d030107034200049c11051fe7694fef560ad73c235f2ef19ff92c87cf1dae809cd4f7d20cebf12a2a5fb7367ebe2ff1d5c67a07b1102495a14ef496d749a1da4f94cdead96ed822a331302f301d0603551d0e04160414598ded596dad484d8ac9a8b7cf654b99a5e4bd3c300e0603551d0f0101ff040403020780300a06082a8648ce3d0403020347003044022034187775955095e7970741ac3151cc974ad6804f348aeb6562eff330dd8ba31a02205c03d6bd41d2b0f5d944ed9c659591674d10d7272e8b37effbc6be9e0aa5dcb4318204b1308204ad020101302330173115301306035504030c0c43412064652070727565626102081736f9add46ce60c300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420dda50d37eacca2de8af51b47a74663f94d99792852a9ea6687e2dc9369519d373037060b2a864886f70d010910022f31283026302430220420b0be4c6763cae673fabdfebabd06f0dcdb6a5b4d2cb7ab6779a9345d07b78f36300a06082a8648ce3d0403020446304402204d4b2a0c68f0c87cf24077124224dd847244d57a23db7a46e7f101974e9a89c502205f488b0e0d116cbc5fdd13e274e576c40d54c21c2d1a344087f5f04e5d12cf4ca182039930820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420c415e348eb93cc4529d5681105637702ab9a798adae9b289add7342faf697ad902012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d010904312204204843729c70c2a27abec4b727b75c358c2a0a8eddc0b54cf3ebeef54cab3864c9300a06082a8648ce3d04030204483046022100c2a05d02b8f5b242c0a9395690885fa7939271a09cd8c65522ee15218d1d73eb022100d2acbcf6644340ec0c1d83053a01f0e6570958340d3c3a4e9d33431770a185b1",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1828,7 +1880,7 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "6d11ef317224927fbf5a7fc47b9b3d9055cf1a23ccdbbd6d67d64c1bcc9cf583",
+          "holder": "b0be4c6763cae673fabdfebabd06f0dcdb6a5b4d2cb7ab6779a9345d07b78f36",
           "issuer": "CA de prueba",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
@@ -1836,14 +1888,14 @@
         }
       ],
       "lines": [
-        "Firmado con un certificado a nombre de «6d11ef317224927fbf5a7fc47b9b3d9055cf1a23ccdbbd6d67d64c1bcc9cf583». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «6d11ef317224927fbf5a7fc47b9b3d9055cf1a23ccdbbd6d67d64c1bcc9cf583» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "Firmado con un certificado a nombre de «b0be4c6763cae673fabdfebabd06f0dcdb6a5b4d2cb7ab6779a9345d07b78f36». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
+        "  «b0be4c6763cae673fabdfebabd06f0dcdb6a5b4d2cb7ab6779a9345d07b78f36» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  DateKeys no comprueba quién emitió los sellos."
       ]
     },
     {
       "name": "names: a PrintableString, shown",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1868,7 +1920,7 @@
     },
     {
       "name": "names: a PrintableString with an underscore, no text: its SHA-256",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1878,7 +1930,7 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "c3a4b8399b8205f12083a075be0c73815f3dc729ea87e8d282111c0152d7b2a2",
+          "holder": "666836b620cd9da9d182429fae8aaca2d48ed50e8f16c77021fe724f511feada",
           "issuer": "CA de prueba",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
@@ -1886,14 +1938,14 @@
         }
       ],
       "lines": [
-        "Firmado con un certificado a nombre de «c3a4b8399b8205f12083a075be0c73815f3dc729ea87e8d282111c0152d7b2a2». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «c3a4b8399b8205f12083a075be0c73815f3dc729ea87e8d282111c0152d7b2a2» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "Firmado con un certificado a nombre de «666836b620cd9da9d182429fae8aaca2d48ed50e8f16c77021fe724f511feada». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
+        "  «666836b620cd9da9d182429fae8aaca2d48ed50e8f16c77021fe724f511feada» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  DateKeys no comprueba quién emitió los sellos."
       ]
     },
     {
       "name": "names: a PrintableString with an at sign, no text: its SHA-256",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d7365637572697479010102590676a3000201582381582030b2e2546ad18197cb9eae9a78af745aa2bc012390531960f0f7d7d344c03c6c025906493082064506092a864886f70d010702a082063630820632020101310d300b0609608648016503040201300b06092a864886f70d010701a082015a308201563081fea003020102020804477c33fc27ee66300a06082a8648ce3d04030230173115301306035504030c0c434120646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a301a311830160603550403130f616e61406578616d706c652e636f6d3059301306072a8648ce3d020106082a8648ce3d030107034200046a44a7a67d9241fb63b4d3b761baed8fcf90d99f822ec789ba98fa15e02162333162f04afdfe98761dd5e5e7ea4fed8ee53b258f7836faa6033c6877da764546a331302f301d0603551d0e04160414a1083b23c7389f01da0b977a3f88058e37b203e1300e0603551d0f0101ff040403020780300a06082a8648ce3d0403020347003044022040347f89ea19cfc9e551b7a37eb0290d1b027565c68794adc49655398ba7227e02201c0bc74b06129dfc2866ac58b397a5655e97e7e125f386076e6bc3819146e98f318204b1308204ad020101302330173115301306035504030c0c434120646520707275656261020804477c33fc27ee66300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d0109043122042068df30d9f0a12a409a8516586f112f0d6cf8134796a2fac4cf6234c440e052263037060b2a864886f70d010910022f3128302630243022042030b2e2546ad18197cb9eae9a78af745aa2bc012390531960f0f7d7d344c03c6c300a06082a8648ce3d04030204483046022100b84edc3f266f53d3b01247f7d83b794f3481bed3aa3fac2f6468292fe6f30453022100d686e295c0d293c772873ca654b6818ca6f15e62e2556e2866660822eddf5c22a182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420e4c8213512f79d0cf412b2049bf8da4cca4808b8e0143f9b5cbbb8503b4444cb02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd9318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d01090431220420c7ce433eb97f3fea86c52ab2b81cafe58aba079353a813de343f74c8da1270b4300a06082a8648ce3d04030204463044022069d54969a3289a6daf6af45981f0f9b904b04e1478def55412597972fea1870202201dd39c8d438c464d7adda059634ef7430c87f67f964869becba7f8db1273842f",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1903,7 +1955,7 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "f817ec9509cbab242673f52bdbee7e59fec5d0a4ba11a13da2a6e35ae1194516",
+          "holder": "30b2e2546ad18197cb9eae9a78af745aa2bc012390531960f0f7d7d344c03c6c",
           "issuer": "CA de prueba",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
@@ -1911,14 +1963,14 @@
         }
       ],
       "lines": [
-        "Firmado con un certificado a nombre de «f817ec9509cbab242673f52bdbee7e59fec5d0a4ba11a13da2a6e35ae1194516». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «f817ec9509cbab242673f52bdbee7e59fec5d0a4ba11a13da2a6e35ae1194516» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "Firmado con un certificado a nombre de «30b2e2546ad18197cb9eae9a78af745aa2bc012390531960f0f7d7d344c03c6c». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
+        "  «30b2e2546ad18197cb9eae9a78af745aa2bc012390531960f0f7d7d344c03c6c» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  DateKeys no comprueba quién emitió los sellos."
       ]
     },
     {
       "name": "names: a BMPString, shown",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d736563757269747901010259067ca30002015823815820f553024d9d4354b10a560e06cd5d49cff1ff25711e6acaab02cde41afdc250660259064f3082064b06092a864886f70d010702a082063c30820638020101310d300b0609608648016503040201300b06092a864886f70d010701a08201603082015c30820101a0030201020208144d68ce8b104829300a06082a8648ce3d04030230173115301306035504030c0c434120646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a301d311b301906035504031e120041006e00610020004c00f300700065007a3059301306072a8648ce3d020106082a8648ce3d03010703420004de9eead85647feced95827e8ed47aab5508d0ce6fe7bcfad90c9201a86c2da81f9a89360e47fb9b3532674b3e025444a63e4764ea3e7d19a2338e67460bc7f58a331302f301d0603551d0e04160414e56378866b77f524abba8d4c93a45577ff5ebdbb300e0603551d0f0101ff040403020780300a06082a8648ce3d0403020349003046022100a7bf48472c9ad83c3cbbf152049afc9ba902b7262e799e4864195f1b9801aba3022100a31d63f95b5acf86403c7382efe31cc168ca804242f0db7b2a4953f3dff27171318204b1308204ad020101302330173115301306035504030c0c4341206465207072756562610208144d68ce8b104829300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d0109043122042050ed02bf6488dc17b0391f628e06cf6b43ecbac4a0eb859b010e5752b9e4c2cf3037060b2a864886f70d010910022f31283026302430220420f553024d9d4354b10a560e06cd5d49cff1ff25711e6acaab02cde41afdc25066300a06082a8648ce3d04030204473045022100d3174a00e7f1fa8f08c6c7e54ab16585532da90fc7acb0c04cba0f90424db04602207b1a70644b7ece7bbf11968b0464a12025b94adbc814e734b8a2a85fe65cb101a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104209e7ef500c4cda4c461cae6b10cf801ebc847761425ace7e4ebea6aa7af92fb6b02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d01090431220420333cde5c8ca35980bfff8b20809b6514eb8b54a4e247e9fed3a8d45c3e7bd993300a06082a8648ce3d0403020447304502201de4a98b75b8195d1128ae4b38eafb9ff73e96b62c65291a2d007604a315af9c0221008ba1bc40f4d5beb5c1cdfb3cd8fdfb05cf4d777b2fab5228bf185c9f500f8a07",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1943,7 +1995,7 @@
     },
     {
       "name": "names: a BMPString of odd length, no text: its SHA-256",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1953,7 +2005,7 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "b0448f6e9d17424b15abb63cab9b159e611f2ca3d97f41ef7ebcf37aaac59b6c",
+          "holder": "376b065aede7c3176a145894c466d74870437b9fb3baf554ca9e4b2cc820f6db",
           "issuer": "CA de prueba",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
@@ -1961,14 +2013,14 @@
         }
       ],
       "lines": [
-        "Firmado con un certificado a nombre de «b0448f6e9d17424b15abb63cab9b159e611f2ca3d97f41ef7ebcf37aaac59b6c». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «b0448f6e9d17424b15abb63cab9b159e611f2ca3d97f41ef7ebcf37aaac59b6c» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "Firmado con un certificado a nombre de «376b065aede7c3176a145894c466d74870437b9fb3baf554ca9e4b2cc820f6db». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
+        "  «376b065aede7c3176a145894c466d74870437b9fb3baf554ca9e4b2cc820f6db» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  DateKeys no comprueba quién emitió los sellos."
       ]
     },
     {
       "name": "names: a BMPString with a surrogate, no text: its SHA-256",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -1978,7 +2030,7 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "129f54b938e96f1d7ddabb664b08abd2ebd0ca353ba8e67f17399b2d06cf6464",
+          "holder": "3b86cc501f0e9ccc34d86b98edde77c1dc37df694a9a87077e4a01e381b1b83e",
           "issuer": "CA de prueba",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
@@ -1986,14 +2038,14 @@
         }
       ],
       "lines": [
-        "Firmado con un certificado a nombre de «129f54b938e96f1d7ddabb664b08abd2ebd0ca353ba8e67f17399b2d06cf6464». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «129f54b938e96f1d7ddabb664b08abd2ebd0ca353ba8e67f17399b2d06cf6464» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "Firmado con un certificado a nombre de «3b86cc501f0e9ccc34d86b98edde77c1dc37df694a9a87077e4a01e381b1b83e». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
+        "  «3b86cc501f0e9ccc34d86b98edde77c1dc37df694a9a87077e4a01e381b1b83e» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  DateKeys no comprueba quién emitió los sellos."
       ]
     },
     {
       "name": "names: a TeletexString in ASCII, shown",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d7365637572697479010102590670a30002015823815820e40041a09c7c10bedbe4ec396eb6b026332413a29ac156ac2365d91e25890607025906433082063f06092a864886f70d010702a08206303082062c020101310d300b0609608648016503040201300b06092a864886f70d010701a0820154308201503081f8a00302010202082376ea1459e839b7300a06082a8648ce3d04030230173115301306035504030c0c434120646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a30143112301006035504031409416e61204c6f70657a3059301306072a8648ce3d020106082a8648ce3d03010703420004ec2ae56b95aa1bb9658a8c0f0fe6788453dc6bdbd1e23cf7061dcbac00d03b00836c5f9aeaeeee08b05b512c037bbc0f4b88fd98c9717757d24516c9e70ae939a331302f301d0603551d0e0416041412cee8f78452e245498f815b7a579d1f0637f890300e0603551d0f0101ff040403020780300a06082a8648ce3d040302034700304402206b3e646b814a8747e7d580f8b44320da72157725171d211945287a39725a8df7022039288047f9806df96ff5a75940dba2d0d1feff61caac427a351a184a8b1c099f318204b1308204ad020101302330173115301306035504030c0c43412064652070727565626102082376ea1459e839b7300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204208968a3656d99d8ed1ff83a3cec16ff5d7809e459c13dccb86f2f6d7aeb4f04f23037060b2a864886f70d010910022f31283026302430220420e40041a09c7c10bedbe4ec396eb6b026332413a29ac156ac2365d91e25890607300a06082a8648ce3d04030204473045022025577d549f859199886ce3dcca49e87a64da73a85c4f4017b191803e489978bf022100e343c99391f4cef7ba6d7de51368131b127879b73e939810be548ad957353ed7a182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104203582a7710c4144358786b008380c85edb7351454bd1c5a6f5455b78a5c8deb6602012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d01090431220420f38a11a9c5b354e5cdd2046ada5dcfc7d6a7c508cbde21b309d3c2be3e418770300a06082a8648ce3d04030204473045022055ff5a661e577e09105642ce8aac1df95e4f6a0d21af489b348d8d13e97658ca022100d81ac40171885bcbc5c9bd6fc0b7658c394b9c5844de24ad720b2729088fbd28",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2018,7 +2070,7 @@
     },
     {
       "name": "names: a TeletexString with a byte of 0xE9, no text: its SHA-256",
-      "security_cbor": "a30071646174656b6579732d736563757269747901010259066fa300020158238158205c1b65735232e1b4a43f8710d45aa929153111886f3c40860a0b1a10f03d82e3025906423082063e06092a864886f70d010702a082062f3082062b020101310d300b0609608648016503040201300b06092a864886f70d010701a0820154308201503081f6a00302010202081af7a39dd8de1a72300a06082a8648ce3d04030230173115301306035504030c0c434120646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a30123110300e06035504031407416e61204ce9613059301306072a8648ce3d020106082a8648ce3d0301070342000496cc97a262c573d40841982ea58f5f64072ac64e61b4d9560bb4edeb831fcbe87f72e7b80e5fe60c6469c4d41b981bdc6e4fa47b3c7b295092b644696cee3568a331302f301d0603551d0e04160414bf5d266e14329d8a8394c19ce45c330a56353ee0300e0603551d0f0101ff040403020780300a06082a8648ce3d0403020349003046022100a9d151def42b6476d9da3ed8149b867a4a396b7c21a4042f716cec4c5b6f58550221008cd0d6ba676da0a08dcfa652cb935ddc8d52013af836551ffb4a8a4e6739ef9b318204b0308204ac020101302330173115301306035504030c0c43412064652070727565626102081af7a39dd8de1a72300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204207febf5a51e214e0d2f76dd9fb6c0808fcbc70e8b0865033849caf11d3f4575d93037060b2a864886f70d010910022f312830263024302204205c1b65735232e1b4a43f8710d45aa929153111886f3c40860a0b1a10f03d82e3300a06082a8648ce3d0403020446304402206b085a6584c96c3d7bade18012b99e3f19d4bdbcc15cf031456b8b30cfe56ea8022055f9691d4de8f927509cfba565d2c2c219b1f004774181604e7f621d06fb14faa182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b06096086480165030402010420ce52ec5523b8bcc20414b121470efbf8b5cec0833e68bc9bf7e80bb5ebede5df02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d0109043122042068ca601c5b63e8b2d242b8dbf9658b97c4db6c2a8d538d27404d4db9345ffd79300a06082a8648ce3d04030204473045022100f521457278edbae2a6739f2af787f05400e6f87aca215a5bcc8e9c76409487e402207dee2458f318a30d5a79fa773eba3a76c56d8c07035439470659526a38e5244b",
+      "security_cbor": "a30071646174656b6579732d7365637572697479010102590670a3000201582381582044e42b5bbc1d4d9d4b276a97e77d35aee855892cfb91923ed4b126a4f636195d025906433082063f06092a864886f70d010702a08206303082062c020101310d300b0609608648016503040201300b06092a864886f70d010701a08201533082014f3081f6a00302010202082c0b3fe5fc98ab0a300a06082a8648ce3d04030230173115301306035504030c0c434120646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a30123110300e06035504031407416e61204ce9613059301306072a8648ce3d020106082a8648ce3d030107034200046f988dcd65c9ff2fbb6c085305c2d6c5a376b319547597e8bd5105f607c771c99facfd5c07ae3a60240d6c489d25b591c7e7c1cde78ef1ec81e013d190cea2f7a331302f301d0603551d0e04160414239b1e45b39860669a7e1aa43297a280eb0fe90b300e0603551d0f0101ff040403020780300a06082a8648ce3d0403020348003045022100b21f9032c5bce8346ea3a2ffe1d725450f5879c259ae8fefd1cba9ebcf480cfc0220780e4dd2778cdcdc316a55a55862b9c441622bacf10a609d87f1fa827d9e78d4318204b2308204ae020101302330173115301306035504030c0c43412064652070727565626102082c0b3fe5fc98ab0a300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420870e41131d22c4be477563e8e06d42ebbd4e558e874d686b25323c7a584e1a303037060b2a864886f70d010910022f3128302630243022042044e42b5bbc1d4d9d4b276a97e77d35aee855892cfb91923ed4b126a4f636195d300a06082a8648ce3d04030204473045022100d3af3f13c0473def44598691773c92943ff585799a630cd1b616f38ad87dfbbb02201bffceec40c5c3452c0e572b28643c8717d02d5c72b908b4d7186e837f5fb9aaa182039930820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042086c386bbdbe8c10eb32da362aad063aeca0b998577897af427fd16c536a217d102012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d0109043122042042e9142c70d100b728866d68b6a8068f670b1ebdc3aef293365966f850db177b300a06082a8648ce3d0403020448304602210086fbe1cd5bf880947b233363d6d1c816656c6c061457f256a0cc673c50ffb956022100de1e59cee2edf612d93c8ac0f2b5025ff0736348488ea1589ea7f37e3c19528c",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2028,7 +2080,7 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "5c1b65735232e1b4a43f8710d45aa929153111886f3c40860a0b1a10f03d82e3",
+          "holder": "44e42b5bbc1d4d9d4b276a97e77d35aee855892cfb91923ed4b126a4f636195d",
           "issuer": "CA de prueba",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
@@ -2036,14 +2088,14 @@
         }
       ],
       "lines": [
-        "Firmado con un certificado a nombre de «5c1b65735232e1b4a43f8710d45aa929153111886f3c40860a0b1a10f03d82e3». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «5c1b65735232e1b4a43f8710d45aa929153111886f3c40860a0b1a10f03d82e3» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "Firmado con un certificado a nombre de «44e42b5bbc1d4d9d4b276a97e77d35aee855892cfb91923ed4b126a4f636195d». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
+        "  «44e42b5bbc1d4d9d4b276a97e77d35aee855892cfb91923ed4b126a4f636195d» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  DateKeys no comprueba quién emitió los sellos."
       ]
     },
     {
       "name": "names: an IA5String, shown",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2068,7 +2120,7 @@
     },
     {
       "name": "names: a UTF8String that is not UTF-8, no text: its SHA-256",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2078,7 +2130,7 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "e4bdbd0fe3141a1354411b7519012caf6351e9d43d26e0157b28311dd6c53d93",
+          "holder": "51eae5c0c89d9480724753c8cc74041ca320648270e59d0229a20977e84c9268",
           "issuer": "CA de prueba",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
@@ -2086,14 +2138,14 @@
         }
       ],
       "lines": [
-        "Firmado con un certificado a nombre de «e4bdbd0fe3141a1354411b7519012caf6351e9d43d26e0157b28311dd6c53d93». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «e4bdbd0fe3141a1354411b7519012caf6351e9d43d26e0157b28311dd6c53d93» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "Firmado con un certificado a nombre de «51eae5c0c89d9480724753c8cc74041ca320648270e59d0229a20977e84c9268». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
+        "  «51eae5c0c89d9480724753c8cc74041ca320648270e59d0229a20977e84c9268» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  DateKeys no comprueba quién emitió los sellos."
       ]
     },
     {
       "name": "names: two commonNames, no text: its SHA-256",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2103,7 +2155,7 @@
       "seal": "S0",
       "signers": [
         {
-          "holder": "4cde95fbd3c5c7423d592efa68edf9018c3afe95c439519edb66d4f2939b8aed",
+          "holder": "8645ca2e3e9574f49eb7e16ef3ac58c276137d5ffe1531653f2d69318c4d822a",
           "issuer": "CA de prueba",
           "result": "valid",
           "seal_time": "2026-09-30T12:00:00Z",
@@ -2111,14 +2163,14 @@
         }
       ],
       "lines": [
-        "Firmado con un certificado a nombre de «4cde95fbd3c5c7423d592efa68edf9018c3afe95c439519edb66d4f2939b8aed». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
-        "  «4cde95fbd3c5c7423d592efa68edf9018c3afe95c439519edb66d4f2939b8aed» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
+        "Firmado con un certificado a nombre de «8645ca2e3e9574f49eb7e16ef3ac58c276137d5ffe1531653f2d69318c4d822a». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial.",
+        "  «8645ca2e3e9574f49eb7e16ef3ac58c276137d5ffe1531653f2d69318c4d822a» (emisor según su certificado: «CA de prueba»), sellado por «Autoridad de Sellado de prueba» el 2026-09-30T12:00:00Z, antes de la fecha de apertura.",
         "  DateKeys no comprueba quién emitió los sellos."
       ]
     },
     {
       "name": "names: an issuer without a commonName, its organizationName",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d73656375726974790101025906a0a300020158238158200b431473e6643c438e12690fa98781ec86622e17b501b60929d4959876daa529025906733082066f06092a864886f70d010702a08206603082065c020101310d300b0609608648016503040201300b06092a864886f70d010701a082016e3082016a3082010fa00302010202080b388f5a56e6fa57300a06082a8648ce3d040302302d310b3009060355040613024553311e301c060355040a0c1542616e636f206465205072756562617320532e412e301e170d3230303130313030303030305a170d3430303130313030303030305a30153113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d030107034200045240c322d662ce57e219dcb5adb36b19866eb0f6db82a28312c262482923bdb0808647d8992f933fd4814941feb303edbaa27bc49ea8170140f892bb71257993a331302f301d0603551d0e04160414e0b87fd984de797b3cad0b444ba6225af746707a300e0603551d0f0101ff040403020780300a06082a8648ce3d0403020349003046022100ad93b3dd3343d149c886af66faea293c2b879186e6ec3611f4c00420e135b2d102210085b2400cccc6aa6ce8e6fddb17e112cd7ea5264bab7a086c818674e15c4caef4318204c7308204c30201013039302d310b3009060355040613024553311e301c060355040a0c1542616e636f206465205072756562617320532e412e02080b388f5a56e6fa57300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d010904312204202b3119b039d9dd1cd89d76a5deb3171550e6864293efc70156f8740f76d70cdc3037060b2a864886f70d010910022f312830263024302204200b431473e6643c438e12690fa98781ec86622e17b501b60929d4959876daa529300a06082a8648ce3d04030204483046022100fdd74e9fb176f540eca7671e57938296439ee0409b7efa5736c0f4eccddda0d2022100a06a3f29b327d083ae278422b821847e4e9e1735ee69fadf2ca9e626478531eea182039730820393060b2a864886f70d010910020e318203823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104207df483a353ef11e5ecbc4ff9b37653bd048a9c21f0ad910ca23b8a8fae2791ce02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd9318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d010904312204201e34f120557eec0427d9dc1569947586535954633859350c35512e26193a0054300a06082a8648ce3d0403020446304402200c5d86d7544c375b8cdec942b73907d1239c80f70948ef83492bdeda06b59b8802203ca658eeacd618310ee5eb028312037ba2d9808fd4e8fe32c2f6b5b813bcd40d",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2143,7 +2195,7 @@
     },
     {
       "name": "names: an issuer without text, the SHA-256 of its name",
-      "security_cbor": "a30071646174656b6579732d7365637572697479010102590696a30002015823815820f5a650ad3cddb4c44cf7f965929d620db3ef7b1c674bf31f287982fee5cd9805025906693082066506092a864886f70d010702a082065630820652020101310d300b0609608648016503040201300b06092a864886f70d010701a0820169308201653082010ba0030201020208096369fbd47134c9300a06082a8648ce3d0403023029310b3009060355040613024553311a3018060355040b0c11556e696461642064652070727565626173301e170d3230303130313030303030305a170d3430303130313030303030305a30153113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d0301070342000431134e24089c2cb7886e97d804624f735ee3d9277feb71d5744a890f2545d667bb2ec1b772489ea957ef6a920ab41db6a0ddb8be8fc6aea6fe10cfad8c79692da331302f301d0603551d0e04160414d7c37a6975fff72918000788cf6eb6e6e69fe980300e0603551d0f0101ff040403020780300a06082a8648ce3d0403020348003045022100f5670bec7943933a38972ef132542e7acba2b780fa41071323635ecdf5b4afbb022054464e10833e5a0440cc9791188f4ab1656f1e98f6ceb02758ed97f03810b035318204c2308204be02010130353029310b3009060355040613024553311a3018060355040b0c11556e6964616420646520707275656261730208096369fbd47134c9300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d01090431220420b0eea8e98d1d957953b415ab5d73d438255928e141b6b9d184bb207e04d8b74e3037060b2a864886f70d010910022f31283026302430220420f5a650ad3cddb4c44cf7f965929d620db3ef7b1c674bf31f287982fee5cd9805300a06082a8648ce3d0403020446304402205000da48172caeafae70b5ec3ef04b27876c5286ca9e8c069b58042320cc183f022069aceb47aafcbbf0e1163c71f3c4cc1324d010ff6a2892b745ecaf29ead1defba182039830820394060b2a864886f70d010910020e318203833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104208fc26dcdf7c3be46dcc15b6b7ff79a3f1707546cb349e92ac9b16fbbf774490702012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420db39fb2f4e32cfc39aba26a8029823afe54547182e34939fd913091cdec5a64d300a06082a8648ce3d0403020447304502205e70ab55452620148f59aa607e71682c03ece2b1a6f20b4c4c27eb874b97fdfd022100a6b0fd4c52c6bcfc0aedcfff521336d9ad497997893a9f028af7ccac886a013e",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2168,7 +2220,7 @@
     },
     {
       "name": "names: an issuer whose commonName has an escape, the SHA-256 of its name and not its organizationName",
-      "security_cbor": "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",
+      "security_cbor": "a30071646174656b6579732d73656375726974790101025906bca30002015823815820d74a97eecdce7528f6b1254d3ba1451e343f1bfaf7dddab5e9750dcb18ce53d40259068f3082068b06092a864886f70d010702a082067c30820678020101310d300b0609608648016503040201300b06092a864886f70d010701a082017b308201773082011da00302010202082269210754447352300a06082a8648ce3d040302303b311e301c060355040a0c1542616e636f206465205072756562617320532e412e3119301706035504030c1043411b5b324a20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a30153113301106035504030c0a416e61204cc3b370657a3059301306072a8648ce3d020106082a8648ce3d0301070342000458c8cbb6357d2842581a6daf7ff3d241eee48cefbe4dd2dfdbe23a74489e8d187430c1b6578a6b6d31f7681cbc84f1a9178102ae489cc1b069128225f01bb22ca331302f301d0603551d0e04160414c33164b5ad1b87873579bc9dfef86e78a51228c8300e0603551d0f0101ff040403020780300a06082a8648ce3d0403020348003045022100b7621e3b8edf9dcf2525d70288d397eef42f1e0bfe62cf46b1828c85152cf984022027e2e0aad496e9fafb0cd5d6847b8b04ffd33ca3d6e3e47d65272eb62ac73ee7318204d6308204d20201013047303b311e301c060355040a0c1542616e636f206465205072756562617320532e412e3119301706035504030c1043411b5b324a2064652070727565626102082269210754447352300b0609608648016503040201a08184301806092a864886f70d010903310b06092a864886f70d010701302f06092a864886f70d0109043122042024189456a1d72261f7040b930bb56b29b6d8a3212005f44add7676d506eb88f93037060b2a864886f70d010910022f31283026302430220420d74a97eecdce7528f6b1254d3ba1451e343f1bfaf7dddab5e9750dcb18ce53d4300a06082a8648ce3d04030204473045022100bf6938b1c3ccedbf556a7d465836848ca48b6363cd9487e3ab093c83c8f07b4702204b432cf5afc090468cd65655afa2da7c1226d8ca9b4bb2b8a1124a2dc171e4c1a182039930820395060b2a864886f70d010910020e318203843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b0609608648016503040201042040d7d892ebf727b746b283a08d8c6aa493abf78d1166b2b1e3410accadd292bf02012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d01090431220420a0bf8247a57f7cda6e7174a76490201acb3044d609569da9977f645253e20895300a06082a8648ce3d040302044830460221008555a77f05b7dc82b733c036ca8c938027dcfe1e11bd65c36459879b3043d5aa0221009a21374257b2380ee8df2951cf7985669d266ac6ce36ed738180949590361b06",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2193,7 +2245,7 @@
     },
     {
       "name": "seal: before the round time: S4",
-      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a03590384a200020159037d3082037906092a864886f70d010702a082036a30820366020101310d300b06096086480165030402013060060b2a864886f70d0109100104a051044f304d02010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303236303933303132303030305aa08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204205fe6075847442b1eea668b09c8f86114d1271afe9991081fc0cdb5a31588da17300a06082a8648ce3d0403020446304402204dab068527240f30c87d2d560ec73678465f0c46db4baf051f65274591471e3102205ba482ebc0d0c767e4ac5205065d90fdc1ed7ba3ff932ee43c26649956c81a9f",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2209,8 +2261,8 @@
       ]
     },
     {
-      "name": "seal: after the round time: S5",
-      "security_cbor": "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",
+      "name": "seal: after the round time, without accuracy: S5, sealed after",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2220,14 +2272,15 @@
       "seal": "S5",
       "seal_holder": "Autoridad de Sellado de prueba",
       "seal_time": "2030-01-01T00:01:00Z",
+      "seal_reason": "late",
       "lines": [
         "Firmado con la clave dkauthor1af9xcclzn3fq40h42pa3xtk9lx25wa4wh6l8hyjzrm4xj9zx6gkqx3lrza. No prueba quién la tiene.",
-        "Sellado después de la fecha de apertura: no prueba nada anterior."
+        "No acredita que se sellara antes de la fecha de apertura: se selló después de esa fecha o demasiado cerca de ella."
       ]
     },
     {
       "name": "seal: t plus the accuracy past the round time: S5",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2237,14 +2290,15 @@
       "seal": "S5",
       "seal_holder": "Autoridad de Sellado de prueba",
       "seal_time": "2029-12-31T23:59:59Z",
+      "seal_reason": "late",
       "lines": [
         "Firmado con la clave dkauthor1af9xcclzn3fq40h42pa3xtk9lx25wa4wh6l8hyjzrm4xj9zx6gkqx3lrza. No prueba quién la tiene.",
-        "Sellado después de la fecha de apertura: no prueba nada anterior."
+        "No acredita que se sellara antes de la fecha de apertura: se selló después de esa fecha o demasiado cerca de ella."
       ]
     },
     {
       "name": "seal: t plus the accuracy equal to the round time: S5",
-      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a0359038aa20002015903833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303239313233313233353935395a3003020101a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204200c92345a64ba03e7fc117b1fd5b182eadf35f1e7e647d05e4e6dd62c19551f71300a06082a8648ce3d0403020447304502210090dd1499741cdc1db55c09d4f29baaebbcfa46d0ff3bf7b324918cb5834d1aa70220687da12daa3c00fce83288177b7f9ae09a4c7292040fd9ecf5b28f858acbe9fb",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2254,14 +2308,120 @@
       "seal": "S5",
       "seal_holder": "Autoridad de Sellado de prueba",
       "seal_time": "2029-12-31T23:59:59Z",
+      "seal_reason": "late",
+      "lines": [
+        "Firmado con la clave dkauthor1af9xcclzn3fq40h42pa3xtk9lx25wa4wh6l8hyjzrm4xj9zx6gkqx3lrza. No prueba quién la tiene.",
+        "No acredita que se sellara antes de la fecha de apertura: se selló después de esa fecha o demasiado cerca de ella."
+      ]
+    },
+    {
+      "name": "seal: without accuracy, years before the round time: S5, it does not say its precision",
+      "security_cbor": "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",
+      "context": {
+        "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
+        "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
+        "round_time": "2030-01-01T00:00:00Z"
+      },
+      "signature": "F4",
+      "seal": "S5",
+      "seal_holder": "Autoridad de Sellado de prueba",
+      "seal_time": "2026-09-30T12:00:00Z",
+      "seal_reason": "no accuracy",
+      "lines": [
+        "Firmado con la clave dkauthor1af9xcclzn3fq40h42pa3xtk9lx25wa4wh6l8hyjzrm4xj9zx6gkqx3lrza. No prueba quién la tiene.",
+        "No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
+      ]
+    },
+    {
+      "name": "seal: of the BTSP policy of ETSI, without accuracy: S5, it does not say the precision its policy requires",
+      "security_cbor": "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",
+      "context": {
+        "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
+        "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
+        "round_time": "2030-01-01T00:00:00Z"
+      },
+      "signature": "F4",
+      "seal": "S5",
+      "seal_holder": "Autoridad de Sellado de prueba",
+      "seal_time": "2026-09-30T12:00:00Z",
+      "seal_reason": "no accuracy, BTSP",
+      "lines": [
+        "Firmado con la clave dkauthor1af9xcclzn3fq40h42pa3xtk9lx25wa4wh6l8hyjzrm4xj9zx6gkqx3lrza. No prueba quién la tiene.",
+        "No acredita que se sellara antes de la fecha de apertura: el sello no dice la precisión que exige su política."
+      ]
+    },
+    {
+      "name": "seal: of the BTSP policy, without accuracy, after the round time: S5, sealed after",
+      "security_cbor": "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",
+      "context": {
+        "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
+        "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
+        "round_time": "2030-01-01T00:00:00Z"
+      },
+      "signature": "F4",
+      "seal": "S5",
+      "seal_holder": "Autoridad de Sellado de prueba",
+      "seal_time": "2030-01-01T00:00:00Z",
+      "seal_reason": "late",
+      "lines": [
+        "Firmado con la clave dkauthor1af9xcclzn3fq40h42pa3xtk9lx25wa4wh6l8hyjzrm4xj9zx6gkqx3lrza. No prueba quién la tiene.",
+        "No acredita que se sellara antes de la fecha de apertura: se selló después de esa fecha o demasiado cerca de ella."
+      ]
+    },
+    {
+      "name": "seal: of the BTSP policy, with accuracy: S4",
+      "security_cbor": "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",
+      "context": {
+        "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
+        "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
+        "round_time": "2030-01-01T00:00:00Z"
+      },
+      "signature": "F4",
+      "seal": "S4",
+      "seal_holder": "Autoridad de Sellado de prueba",
+      "seal_time": "2026-09-30T12:00:00Z",
       "lines": [
         "Firmado con la clave dkauthor1af9xcclzn3fq40h42pa3xtk9lx25wa4wh6l8hyjzrm4xj9zx6gkqx3lrza. No prueba quién la tiene.",
-        "Sellado después de la fecha de apertura: no prueba nada anterior."
+        "Según un sello a nombre de «Autoridad de Sellado de prueba», existía el 2026-09-30T12:00:00Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello."
+      ]
+    },
+    {
+      "name": "seal: an accuracy of 0 seconds, a microsecond before the round time: S4",
+      "security_cbor": "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",
+      "context": {
+        "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
+        "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
+        "round_time": "2030-01-01T00:00:00Z"
+      },
+      "signature": "F4",
+      "seal": "S4",
+      "seal_holder": "Autoridad de Sellado de prueba",
+      "seal_time": "2029-12-31T23:59:59.999999Z",
+      "lines": [
+        "Firmado con la clave dkauthor1af9xcclzn3fq40h42pa3xtk9lx25wa4wh6l8hyjzrm4xj9zx6gkqx3lrza. No prueba quién la tiene.",
+        "Según un sello a nombre de «Autoridad de Sellado de prueba», existía el 2029-12-31T23:59:59.999999Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello."
+      ]
+    },
+    {
+      "name": "seal: an empty accuracy, a precision of 0: S4",
+      "security_cbor": "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",
+      "context": {
+        "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
+        "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
+        "round_time": "2030-01-01T00:00:00Z"
+      },
+      "signature": "F4",
+      "seal": "S4",
+      "seal_holder": "Autoridad de Sellado de prueba",
+      "seal_time": "2026-09-30T12:00:00Z",
+      "lines": [
+        "Firmado con la clave dkauthor1af9xcclzn3fq40h42pa3xtk9lx25wa4wh6l8hyjzrm4xj9zx6gkqx3lrza. No prueba quién la tiene.",
+        "Según un sello a nombre de «Autoridad de Sellado de prueba», existía el 2026-09-30T12:00:00Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello."
       ]
     },
     {
       "name": "seal: t plus an accuracy of 999 ms and 999 µs, a microsecond before the round time: S4",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2278,7 +2438,7 @@
     },
     {
       "name": "seal: an accuracy of seconds, millis and micros: S4",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2295,7 +2455,7 @@
     },
     {
       "name": "seal: a genTime with a fraction of a second: S4, t with its fraction",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2312,7 +2472,7 @@
     },
     {
       "name": "seal: the certificate of the authority twice: S4",
-      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a0359053da20002015905363082053206092a864886f70d010702a08205233082051f020101310d300b06096086480165030402013060060b2a864886f70d0109100104a051044f304d02010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303236303933303132303030305aa082036e308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204205fe6075847442b1eea668b09c8f86114d1271afe9991081fc0cdb5a31588da17300a06082a8648ce3d04030204483046022100fbd33e432a54b32c7431c75cd272a034c852798cce58711503f395ba750d16c30221009a685993f26e7fab895a54837a8258fea6ef223978b48ac3ec676a8dafd71fd0",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2329,7 +2489,7 @@
     },
     {
       "name": "seal: a CRL in the token decides nothing: S4",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2346,7 +2506,7 @@
     },
     {
       "name": "seal: signing-certificate-v2 in the token: S4",
-      "security_cbor": "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",
+      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a03590397a20002015903903082038c06092a864886f70d010702a082037d30820379020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303236303933303132303030305a3003020101a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd9318201413082013d020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a08186301a06092a864886f70d010903310d060b2a864886f70d0109100104302f06092a864886f70d01090431220420eff04185c4f9e4d08e76671449ece4c02422f6c191aa7e6a1b37d6c76017f1a53037060b2a864886f70d010910022f312830263024302204209052244315cb9097d228673f075f96f52d492c315af074bc4e8d163abdce06ec300a06082a8648ce3d0403020447304502200c6690544c4df005829299ca0ec8c48d480b7843552a334aed1ec43328cc33ed0221008e79efc38c6b999afd4d8bfb8f98041c4556a032435fea7d87c9bbd007962fd0",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2363,7 +2523,7 @@
     },
     {
       "name": "seal: ordering TRUE, a nonce, a tsa and extensions: S4",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2380,7 +2540,7 @@
     },
     {
       "name": "seal: an authority of RSA with RSASSA-PSS and SHA-512: S4",
-      "security_cbor": "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",
+      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a03590609a2000201590602308205fe06092a864886f70d010702a08205ef308205eb020101310d300b06096086480165030402033065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303236303933303132303030305a3003020101a082032e3082032a30820212a00302010202080e84cb0a9b0cfded300d06092a864886f70d01010b0500303a31163014060355040a130d446174654b65797320746573743120301e060355040313174175746f72696461642052534120646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a303a31163014060355040a130d446174654b65797320746573743120301e060355040313174175746f7269646164205253412064652070727565626130820122300d06092a864886f70d01010105000382010f003082010a0282010100d9a6f4a3a25cf413abe3836011e638b514c447afbe2f1beba71e624d8e8801fefaa58cae84d2e6c835cbbb648af6b35ee63a530224394e24f749860834cf1ec37d76b6e595710459a4daee85293fe607d27a09fff4a30cc9699b4dcd2a95523347991452ffa2ba330dfeb8ee9319e8f32091c990397c0c71844f5855d4f49f5074e74ef6679a99f5c4cf256fb6ea3741e6d6b2157305918e75c1ca40f83812eec49e3745b41f095f7b9fd3e304b1ca8848ec9056515b6c4bf15e37b2ada00494d50e20e9fcfb80118aa9b3455e76bf3b49865a5ac6f9250a17ce7ad677d8d2a363b2e3e5e3d47b4220f9c142bfb4058bfd595c6c434aeae0f829b75fe751460b0203010001a3343032300e0603551d0f0101ff04040302078030200603551d0e041904174175746f72696461642052534120646520707275656261300d06092a864886f70d01010b05000382010100cef62fbe37760c3fcd254336283ffda6426fc35efde6a5a064ad65148ce3e7057ad5b197bb9183377a0a53b1a2e717defd91e3cc397b55e25236a4b0017d005a2bb28f34c36032a760e22671455a4a52bcc47ae299bfc42bbafd98e3189af3a2ff8345339332b0bd39e7482535664b4b4b31e470db5c15c75bd94f7ecedacd347acdd2186892a4e601149dd16e1de5ea815d49acbafe5e7c37e0b8f910a9e135d97fcae5d7724cf96245d565de1302690a0baf718044ed805fed46b264d2d3ff55331886ad274f6a744eff20b4a7b32d03e5e937ad62e67026b4c5dc2e5e411d64a9b256af2e266668bd159663da3ae44b96690780d14283bce1cf7551cbb0b03182023c308202380201013046303a31163014060355040a130d446174654b65797320746573743120301e060355040313174175746f7269646164205253412064652070727565626102080e84cb0a9b0cfded300b0609608648016503040203a0819a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a30183016041417daebab7f28e3d294a8b7ca85ce8c78f8a4fbb2304f06092a864886f70d0109043142044056a67a901526cefe83c24ab69419c361ed25a44a1cc51791f16cb2d31a50cad791e7cf2b32b576f4b55e9bad74e589198a9ccadacb3e9184d24bad6fed292614303d06092a864886f70d01010a3030a00d300b0609608648016503040203a11a301806092a864886f70d010108300b0609608648016503040203a2030201400482010027c47b35e3edbd6703297eb1a8990839823b5b635aef5b850adcdf8be80240efd103e25fc532093f5d58f89fa229125af604d99a1a658bdddbbeab64aba5bea0961082b070585308ab18bef1ab7ddcd56b7faaae1b3005d1f3385196820dcbdfbe8e29224a4e350fa499582320d8bd189c4bd85934860e5376fc1c4b64a0e356d7822a9ff0db229509061693ee3914097c74a806ae007fb71e9d5c41749d946b07fa308a75d5831634357097bc9bd3a2cd5b48044d90cbb98557c0d476332221feeae8724f2b005a2f8f9a7d95a7c2d4636e13b18fcfd0adc5612d7fe8490c8dbaf5cc3550297859a24aa37c998c1162d1c4d2ab4be1cc94ddba98ddcd3c413f",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2397,7 +2557,7 @@
     },
     {
       "name": "seal: an authority named with 50 spaces and the text of F3: S4, by its SHA-256",
-      "security_cbor": "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",
+      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a0359049fa20002015904983082049406092a864886f70d010702a082048530820481020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303236303933303132303030305a3003020101a08202863082028230820227a0030201020208338bff5e4989f1f9300a06082a8648ce3d04030230818531163014060355040a130d446174654b6579732074657374316b30690603550403136254534120202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020204669726d61646f20636f6e206c6120636c617665207175652067756172646173746520636f6d6f2042616e636f301e170d3230303130313030303030305a170d3430303130313030303030305a30818531163014060355040a130d446174654b6579732074657374316b30690603550403136254534120202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020204669726d61646f20636f6e206c6120636c617665207175652067756172646173746520636f6d6f2042616e636f3059301306072a8648ce3d020106082a8648ce3d03010703420004ba9b50cba66fb3a1f68673ba494b34e6493dd552c32c4528b00f48d3dc2e5e584a87ad87c61fa4ef5899da3edc904937ff0ac5ec4e3e90b12b654052f6a868eaa37f307d300e0603551d0f0101ff040403020780306b0603551d0e0464046254534120202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020204669726d61646f20636f6e206c6120636c617665207175652067756172646173746520636f6d6f2042616e636f300a06082a8648ce3d04030203490030460221009a00d9019792ea1bb2be4d37b750b26ddd1b76a7c7be75bf0f54ff6524425493022100e8ccf0287aadb04b0f4cc6b2f22d08db08010ac7003a9061bf2f6b2e943debf83182017a3082017602010130819230818531163014060355040a130d446174654b6579732074657374316b30690603550403136254534120202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020204669726d61646f20636f6e206c6120636c617665207175652067756172646173746520636f6d6f2042616e636f0208338bff5e4989f1f9300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604142af26366403d9e6155501406fe75087e62caa46d302f06092a864886f70d01090431220420eff04185c4f9e4d08e76671449ece4c02422f6c191aa7e6a1b37d6c76017f1a5300a06082a8648ce3d0403020447304502207dd5253da569f33db152ad08d8d5bbb27f175d49da0f7fc40d77210556170f2d022100e87cfdaf3e0021d6bb422ec293d50fa2f5b8c0c44c85ea987c5659026ab220ec",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2405,16 +2565,16 @@
       },
       "signature": "F4",
       "seal": "S4",
-      "seal_holder": "f13fc863d8ebfcf02b952a95eb64e8d8050cd2a6c590bc041551887f21aa8efa",
+      "seal_holder": "f529fb6e8f66c364b4324d33a9d9a7595b6e80475bc15537a3cee7d581f591d2",
       "seal_time": "2026-09-30T12:00:00Z",
       "lines": [
         "Firmado con la clave dkauthor1af9xcclzn3fq40h42pa3xtk9lx25wa4wh6l8hyjzrm4xj9zx6gkqx3lrza. No prueba quién la tiene.",
-        "Según un sello a nombre de «f13fc863d8ebfcf02b952a95eb64e8d8050cd2a6c590bc041551887f21aa8efa», existía el 2026-09-30T12:00:00Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello."
+        "Según un sello a nombre de «f529fb6e8f66c364b4324d33a9d9a7595b6e80475bc15537a3cee7d581f591d2», existía el 2026-09-30T12:00:00Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello."
       ]
     },
     {
       "name": "seal: over another subject: S3",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2429,7 +2589,7 @@
     },
     {
       "name": "seal: a messageImprint of 33 bytes: S3",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2444,7 +2604,7 @@
     },
     {
       "name": "seal: the authority had expired at its time: S3",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2459,7 +2619,7 @@
     },
     {
       "name": "seal: the authority was not yet valid at its time: S3",
-      "security_cbor": "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",
+      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a03590385a200020159037e3082037a06092a864886f70d010702a082036b30820367020101310d300b06096086480165030402013060060b2a864886f70d0109100104a051044f304d02010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303139303130313030303030305aa08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d0109043122042044d80301d075c9f489b16d0f00c21f83059c52b83e76b34d19dc70ae8e7cea12300a06082a8648ce3d04030204473045022100823a910f16e618427c585d6824957bc9b046973ee910ee27c96367ae238af76e02206866e04e55ac42923fa17bf8f53507f28af3fd2abd3a3e8616084d2be784c24e",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2474,7 +2634,7 @@
     },
     {
       "name": "seal: the signature of the authority does not verify: S3",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2489,7 +2649,7 @@
     },
     {
       "name": "seal: the message-digest of the token is not that of its TSTInfo: S3",
-      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a03590386a200020159037f3082037b06092a864886f70d010702a082036c30820368020101310d300b06096086480165030402013060060b2a864886f70d0109100104a051044f304d02010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303236303933303132303030305aa08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204209cb77e9328b55652b615505fe05fb92485f47cd33d3d43911efee1a459c999d2300a06082a8648ce3d04030204483046022100d5105bb33a2b8fa347a96b1489a9af8782d3d53560cf102bc270b2bca8fc66c6022100cfdb9e0a7efbdf63f4961bb2f9e55cf8a5d6ce871c7ef250d0549f89fabeb5c6",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2519,7 +2679,7 @@
     },
     {
       "name": "seal: a token in BER: S2",
-      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a03590384a200020159037d308006092a864886f70d010702a082036a30820366020101310d300b06096086480165030402013060060b2a864886f70d0109100104a051044f304d02010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303236303933303132303030305aa08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204205fe6075847442b1eea668b09c8f86114d1271afe9991081fc0cdb5a31588da17300a06082a8648ce3d0403020446304402204c0110666328d06abd251c91ef3b9a9a11d969eb358e3e32f6367f9409f8ab5802201b65227ab9a5a93c6de2d25e9c4c1e4c7033177ede5d9784515af47411bb268d0000",
+      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a03590385a200020159037e308006092a864886f70d010702a082036b30820367020101310d300b06096086480165030402013060060b2a864886f70d0109100104a051044f304d02010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303236303933303132303030305aa08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d010904312204205fe6075847442b1eea668b09c8f86114d1271afe9991081fc0cdb5a31588da17300a06082a8648ce3d04030204473045022100a146aaf0744d19cf018e6c7e3ab67b20bff9a87641007b1c52869d1193208621022028ae7f15585ac3a72bc53d84791654951faf2a5f91b8ea0dbbacd37b31e51d8e0000",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2534,7 +2694,7 @@
     },
     {
       "name": "seal: a token without its message-digest: S2",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2549,7 +2709,7 @@
     },
     {
       "name": "seal: a token of two SignerInfo: S2",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2564,7 +2724,7 @@
     },
     {
       "name": "seal: a TSTInfo of version 2: S2",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2579,7 +2739,7 @@
     },
     {
       "name": "seal: a negative accuracy: S2",
-      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a03590389a20002015903823082037e06092a864886f70d010702a082036f3082036b020101310d300b06096086480165030402013065060b2a864886f70d0109100104a0560454305202010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303236303933303132303030305a30030201ffa08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d01090431220420a9c9380a639fa3980607590c17d56e38dad075e97380652bce382337466003ba300a06082a8648ce3d040302044630440220420a02fec1cf20f5ae460672897662cea47b53b1df5d6d8fe674c6f0e33661c402204cea27fc47191ff9f4fc79aca9e833256091e1e1729057dcf0a25bb6e5518025",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2594,7 +2754,7 @@
     },
     {
       "name": "seal: an accuracy of seconds in an INTEGER that is not minimal: S2",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2609,7 +2769,7 @@
     },
     {
       "name": "seal: an accuracy of millis in an INTEGER that is not minimal: S2",
-      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a0359038aa20002015903833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013066060b2a864886f70d0109100104a0570455305302010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303236303933303132303030305a300480020005a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204204562f9a7e36f0c44eea3523ec6d646fa27d516697a7cc18c63d32c4b0a1c84ce300a06082a8648ce3d040302044630440220650e12a2447adbafed425a15847733b66c39d67c5d1463abb615bb5b0821b6800220472576ee749c96807a9f536f5b62c79910c1cbfce548b73c9bcbd9ae8306f14d",
+      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a0359038ba20002015903843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013066060b2a864886f70d0109100104a0570455305302010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303236303933303132303030305a300480020005a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d010904312204204562f9a7e36f0c44eea3523ec6d646fa27d516697a7cc18c63d32c4b0a1c84ce300a06082a8648ce3d04030204473045022100a112d56895312c06e9cf14adc407fbafc9a2a47eabc5367a329bfb9ff30597d002204de1be1db68ca856f0fe681db4ec878079ee28b9803187ba45f9abab4ffcffc1",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2624,7 +2784,7 @@
     },
     {
       "name": "seal: an accuracy of 0 millis: S2",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2639,7 +2799,7 @@
     },
     {
       "name": "seal: an accuracy of 1000 millis: S2",
-      "security_cbor": "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",
+      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a0359038aa20002015903833082037f06092a864886f70d010702a08203703082036c020101310d300b06096086480165030402013066060b2a864886f70d0109100104a0570455305302010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303236303933303132303030305a3004800203e8a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd9318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d01090431220420ca10280c624b4a546b22b94f7146708a8d807f035e91b9199745dee3bfbacc37300a06082a8648ce3d04030204463044022062349cb49193e9c2873e9a239895aae9d75be69995901cdaac0a92a9116977270220358b322ace8d6fd3b458be482efaef754bdfae0f59ae0188104afb68fdf979b5",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2654,7 +2814,7 @@
     },
     {
       "name": "seal: an accuracy of 1000 micros: S2",
-      "security_cbor": "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",
+      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a0359038ba20002015903843082038006092a864886f70d010702a08203713082036d020101310d300b06096086480165030402013066060b2a864886f70d0109100104a0570455305302010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303236303933303132303030305a3004810203e8a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d0109043122042054f4193f7c2178dae2b2cf95b0b7ceb40692212a3f09a3a964e38184b52ab410300a06082a8648ce3d04030204473045022100cf6e197f1bf44e27c8ca66994400e89970e6e34e7026f3597a757a298a1da04b02207bcaba7f49682768ce04840289a4ca11d5616a5a50fd8ae62769324016bd9eef",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2669,7 +2829,7 @@
     },
     {
       "name": "seal: an accuracy of 2^31 seconds: S2",
-      "security_cbor": "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",
+      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a0359038fa20002015903883082038406092a864886f70d010702a082037530820371020101310d300b06096086480165030402013069060b2a864886f70d0109100104a05a0458305602010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303236303933303132303030305a300702050080000000a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d0109043122042091e56bbc482354105a8cae08a6e099ad1997bff20575d4635cb61b069ac8ce71300a06082a8648ce3d04030204483046022100af29efcfd04938022c5afac93b3e79e8a9b0dc08959baed40763d4e8b33b561e022100ac624f2ec9282836e52d22d78f96e294b633b19c7ee9179d2c1b33c707c5cc24",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2684,7 +2844,7 @@
     },
     {
       "name": "seal: a genTime without Z: S2",
-      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a03590385a200020159037e3082037a06092a864886f70d010702a082036b30820367020101310d300b0609608648016503040201305f060b2a864886f70d0109100104a050044e304c02010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180e3230323630393330313230303030a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204202b7ae4494d65b847ddef3d17477bdd36f23ab425368ba58c1d7fefa8251b3ca4300a06082a8648ce3d04030204483046022100b11e6c9a3703d60895789f4d97dad5249739702d039e792b1d63cf1c172609d1022100d94371e1cafd48fa05b30b4f4fefc60ca6a34db77530a8b7d78e0f613710458a",
+      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a03590385a200020159037e3082037a06092a864886f70d010702a082036b30820367020101310d300b0609608648016503040201305f060b2a864886f70d0109100104a050044e304c02010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180e3230323630393330313230303030a08201b7308201b330820159a003020102020810cc71749da69aa0300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200049b0eb8f44e4cea4e3b9ea4d1288282081bc20321d5a262ac41f64d62ba6005e2e875bac8f5aacebe7674008998ab11542470e038e861518c6070d0ea761ff39aa33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022019ea24d1740aef50af2e1a0a3816a4de53840a6876a2b4c84ae537dbb6ae7c7e022100e5528d9157b247911fb8105559dcd8e7420c24a7e2f68c6fbc738c5924683cd93182013530820131020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261020810cc71749da69aa0300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a3018301604148fc36e5b8611c4b96fb12d75ba429bc60486e50b302f06092a864886f70d010904312204202b7ae4494d65b847ddef3d17477bdd36f23ab425368ba58c1d7fefa8251b3ca4300a06082a8648ce3d04030204483046022100fb2ee2dbe01f99250fb79a2212e2aacd9c33d48782135f4e88daca2474aa1a02022100a007749dded7657aefc6e1815144ccd28d5113d89fcac7afd1aaa572a0a1526f",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2699,7 +2859,7 @@
     },
     {
       "name": "seal: a genTime with a trailing zero in its fraction: S2",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2714,7 +2874,7 @@
     },
     {
       "name": "seal: ordering FALSE written: S2",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2729,7 +2889,7 @@
     },
     {
       "name": "seal: a field after the last: S2",
-      "security_cbor": "a40071646174656b6579732d73656375726974790101025869a30001015820ea4a6c63e29c520abef5507b132ec5f9954776aebebe7b92421eea691446d22c02584064d805ef80b891e851aa844d3c455a4b95752f88ee0f1d8e3d0d28c7431d516c9838294e7c361f20c7c9a33e7c7c8803ad934bff6174aae97a88ad8fac41f90a03590395a200020159038e3082038a06092a864886f70d010702a082037b30820377020101310d300b06096086480165030402013070060b2a864886f70d0109100104a061045f305d02010106032a0304302f300b060960864801650304020104203d799ba25f479a7f2d0c37fcf326752ce74b3a0f654dbb9026738c763afe068302012a180f32303236303933303132303030305aa10b300906032a030404020500020107a08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa3182013430820130020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d010904312204206eca55e8dc0993d09fb1e40ee67cd8eadbef58e03582fb2d7bd53e26f0ac2670300a06082a8648ce3d040302044730450220455d2ea8da4496bb323653eafcc93a77ce6b8024d75008a7d92b15440842536a022100a23c9918e1be05227a4bfa1fb562e0d3d4da81ba1a4dcc2c125fc94e60e79ea9",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2744,7 +2904,7 @@
     },
     {
       "name": "seal: SHA-384 in the imprint: S1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2759,7 +2919,7 @@
     },
     {
       "name": "seal: a token signed with SHA-1: S1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2774,7 +2934,7 @@
     },
     {
       "name": "seal: an authority with a compressed key: S1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2789,7 +2949,7 @@
     },
     {
       "name": "seal: an authority with a key of 1024 bits: S1",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2804,7 +2964,7 @@
     },
     {
       "name": "seal: over a capsule without a signature: F0 and S4",
-      "security_cbor": "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",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
@@ -2821,7 +2981,7 @@
     },
     {
       "name": "seal: beside a signature of alg 4294967295, which it seals all the same: F1 and S4",
-      "security_cbor": "a40071646174656b6579732d73656375726974790101024da3001affffffff01410102410103590384a200020159037d3082037906092a864886f70d010702a082036a30820366020101310d300b06096086480165030402013060060b2a864886f70d0109100104a051044f304d02010106032a0304302f300b06096086480165030402010420a70d3e431fbd63dd7f0e37d7fd8b15e66bdc5306892058aaf3651bfa3646838d02012a180f32303236303933303132303030305aa08201b7308201b330820159a00302010202083a16a0f6d84f70f4300a06082a8648ce3d040302304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f20646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f206465207072756562613059301306072a8648ce3d020106082a8648ce3d0301070342000419006a9eefa2e443b6338174ffe5b1350bdd43d50d1100af362632cbacdfbf07068f7eb824a6ad0c005b146f32eb3683fd35d6b004d1519b85a9b1a8f4b624e3a33b3039300e0603551d0f0101ff04040302078030270603551d0e0420041e4175746f72696461642064652053656c6c61646f20646520707275656261300a06082a8648ce3d0403020348003045022028e38b70b347a248bd75b43db48cf6edfecd6f179366f5ea9d52818438a09427022100aff59b85a6f1e32bbfd92cc85035a6314e382610832ae72f2617be66fe2849aa318201333082012f020101304d304131163014060355040a130d446174654b6579732074657374312730250603550403131e4175746f72696461642064652053656c6c61646f2064652070727565626102083a16a0f6d84f70f4300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c3c8dd2b1c4e17b8ccb3f48fec62f5f148d81236302f06092a864886f70d0109043122042038965a0ba9d82c889844414028060b82f332fec5fe7595e0eab642ebebb3c4de300a06082a8648ce3d0403020446304402200e927169234a8f17430671219e8d322c9b3582cc173baa2b9e986b61fa72f4e902204cc18c18074e9ef66f27e5672052cfea6b92fe8137b83dd05520a7bb6024a434",
+      "security_cbor": "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",
       "context": {
         "control_commit": "0fcd568a5cb9bdb4677b69354b11ee415af8f784519cff3da49a26f84eaee7f2",
         "head_digest": "9f2e6d33a3717ee826353a404ba4618d1aeeb6879ad7936bce8ed5f46814924d",
diff --git a/testdata/vectors/tlock_ibe.json b/testdata/vectors/tlock_ibe.json
index 9390c99..329b4f6 100644
--- a/testdata/vectors/tlock_ibe.json
+++ b/testdata/vectors/tlock_ibe.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "H2 of the IBE-CCA of tlock (spec §63 step 11): SHA-256 of \"IBE-H2\" and the 576 bytes of an element of GT, c1 before c0 at every level of the tower and each coordinate of Fp in 48 bytes big-endian (the order of kilic/bls12-381), truncated to 16 bytes. Generated by the reference implementation with drand/kyber-bls12381, the pairing of tlock.",
   "vectors": [
     {
diff --git a/testdata/vectors/tlock_steps.json b/testdata/vectors/tlock_steps.json
index 5fd6261..fd67ecf 100644
--- a/testdata/vectors/tlock_steps.json
+++ b/testdata/vectors/tlock_steps.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "Steps 10 and 11 of spec §63 for Quicknet, value by value, over published releases. Step 10: M = SHA-256(uint64_be(round)), H(M) the hash to G1 of RFC 9380 with the suite BLS12381G1_XMD:SHA-256_SSWU_RO_ and the DST dst, and e(H(M), public_key) = e(signature, G2). Step 11: a stanza body U || V || W built with the sigma and the file key of the vector; H2 = SHA-256(\"IBE-H2\" || e(signature, U))[:16], sigma = V XOR H2, H4 = SHA-256(\"IBE-H4\" || sigma)[:16], file_key = W XOR H4, and r = H3(sigma, file_key): h3_base = SHA-256(\"IBE-H3\" || sigma || file_key), then for i = 1, 2, ... d = SHA-256(uint16_le(i) || h3_base), its first byte shifted one bit to the right, until it is below the order of the group; r·G2 = U. Generated by the reference implementation and checked against drand, kyber, tlock and agewrap. See testdata/README.md.",
   "profile": "datekeys:quicknet:v1",
   "scheme": "bls-unchained-g1-rfc9380",
diff --git a/testdata/vectors/wordkey.json b/testdata/vectors/wordkey.json
index b5be61b..2575539 100644
--- a/testdata/vectors/wordkey.json
+++ b/testdata/vectors/wordkey.json
@@ -1,5 +1,5 @@
 {
-  "spec": "0.15",
+  "spec": "0.16",
   "description": "The key of words (spec §38.1): the words of a text, after NFD, without U+0300 to U+036F, in simple lower case of Unicode 18.0.0 and split by the spaces of the list; what a writer refuses; and the identity, PBKDF2-HMAC-SHA256 of 600000 rounds, for a chain hash, a round and a capsule_id. See testdata/README.md.",
   "normalize": [
     {
@@ -152,6 +152,30 @@
         "ab"
       ]
     },
+    {
+      "name": "the text of the annex of v0.16",
+      "text": "Ñandú  PINGÜINO\tcamión árbol Éter ola",
+      "words": [
+        "nandu",
+        "pinguino",
+        "camion",
+        "arbol",
+        "eter",
+        "ola"
+      ]
+    },
+    {
+      "name": "the text of the annex of v0.16, with its marks apart",
+      "text": "Ñandú  PINGÜINO\tcamión árbol Éter ola",
+      "words": [
+        "nandu",
+        "pinguino",
+        "camion",
+        "arbol",
+        "eter",
+        "ola"
+      ]
+    },
     {
       "name": "U+0009 is a space",
       "text": "uno\tdos",
@@ -648,6 +672,22 @@
       "key": "fceec4d8ca8de86c85a1f26ed49f82a2b38431bd0ce36db995ae7dfd49b96e41",
       "recipient": "age1fqk6hflp8q5um2qrl5ckd8lu4x75rhtuncfus7f7up3v3v0zss0stdpqkr"
     },
+    {
+      "name": "the second vector of the annex of v0.16, 79.7",
+      "words": [
+        "nandu",
+        "pinguino",
+        "camion",
+        "arbol",
+        "eter",
+        "ola"
+      ],
+      "chain_hash": "52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",
+      "round": 1000,
+      "capsule_id": "000102030405060708090a0b0c0d0e0f",
+      "key": "273295d29370126a3be50b743132718d3cd9137fb3bb4cb20aa23163d2e19bb7",
+      "recipient": "age1zje929pk9ej2kqp4pjra5rs4cly7k7deaeclz0jrp5843u6qcy5qwsvjdh"
+    },
     {
       "name": "the next round",
       "words": [
diff --git a/wordlists/SOURCE.json b/wordlists/SOURCE.json
index f7d6306..e7a3689 100644
--- a/wordlists/SOURCE.json
+++ b/wordlists/SOURCE.json
@@ -1,6 +1,6 @@
 {
   "module": "g.activething.com/go/DateKeys",
-  "commit": "aefc8f6dfe89037d71e22d5338a092ff21159429",
+  "commit": "4f7885495bd6ea666cb444519090fb5f3ea46752",
   "files": {
     "README.md": "a29122e04cd8dac3e44d6f271da2ca99ac98e28b27e88c16b58162fe3eebedad",
     "en.txt": "6d557f0693958fb5e650b68b5bee585eb82cf4da32965505c789e924743bc522",