* 3.11.0. Note that the default may change in future releases.
     */
    fun ecdsa256() =
      apply {
        keyAlgorithm = "EC"
        keySize = 256
      }

    /**
     * Configure the certificate to generate a 2048-bit RSA key, which provides about 112 bits of

        // https://tools.ietf.org/html/rfc4055#section-2.1
        ObjectIdentifiers.SHA256_WITH_RSA_ENCRYPTION -> Adapters.NULL
        ObjectIdentifiers.RSA_ENCRYPTION -> Adapters.NULL
        ObjectIdentifiers.EC_PUBLIC_KEY -> Adapters.OBJECT_IDENTIFIER
        else -> null
      }
    }

  /**
   * ```
   * AlgorithmIdentifier ::= SEQUENCE  {
   *   algorithm      OBJECT IDENTIFIER,

barsy.in barsy.info barsy.io barsy.me barsy.menu barsy.mobi barsy.net barsy.online barsy.org barsy.pro barsy.pub barsy.ro barsy.shop barsy.site barsy.support barsy.uk barsycenter.com barsyonline.co.uk barsyonline.com barueri.br barum.no bas.it base.ec base.shop baseball baseball.museum basel.museum bashkiria.ru bashkiria.su basicserver.io basilicata.it basketball baths.museum bato.tochigi.jp batsfjord.no bauern.museum bauhaus bayern bb bbc bbs.tr bbt bbva bc.ca bc.platform.sh bcg bci.dnstrace.pro...

    assertThat(decoded).isEqualTo(date("1949-12-31T23:59:59.000+0000").time)
    assertThat(encoded).isEqualTo(generalizedTimeDer)
  }

  @Test
  fun `reencode golden EC certificate`() {
    val certificateByteString =
      (
        "MIIBkjCCATmgAwIBAgIBETAKBggqhkjOPQQDAjAwMRYwFAYDVQQLDA1HZW5lIFJ" +