diff --git a/cmd/keymaster/testcerts_test.go b/cmd/keymaster/testcerts_test.go
index f4d348d2..c0882dac 100644
--- a/cmd/keymaster/testcerts_test.go
+++ b/cmd/keymaster/testcerts_test.go
@@ -1,86 +1,9 @@
 package main
 
-const rootCAPem = `-----BEGIN CERTIFICATE-----
-MIIE1jCCAr4CAQowDQYJKoZIhvcNAQELBQAwMTELMAkGA1UEBhMCVVMxEDAOBgNV
-BAoMB1Rlc3RPcmcxEDAOBgNVBAsMB1Rlc3QgQ0EwHhcNMjEwMjA1MDA1NDUwWhcN
-NDEwMTMxMDA1NDUwWjAxMQswCQYDVQQGEwJVUzEQMA4GA1UECgwHVGVzdE9yZzEQ
-MA4GA1UECwwHVGVzdCBDQTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
-AMepGyjzJkXS3gCBStImA3I/OY6us1MqzqQGeRJIL/13n9PHqPfXIjadJ7z0krFB
-xXGT2WyVRhoc+tP1K8rfwRjNtMDjxtzphDLaUSvjhB5FvOhR0Ch6ByrFlP507FVa
-MeQo+8Bex9q0SaHXtGLM5hWuYQpG6dpOlXl6DKQwqYjptzL/RfMwJKukaoc0J5e+
-3xNR3XhC+ejMHp99rEORC4aLhfWhwfOhtIslIVI/HXKu72/lxIMpkhaoObBgqdQC
-3e5KMg+/liZ6y/HOhN49pKuNq1SfKy6tOpI4fwZnWvKviNx8E16P4JlqPdLPAULb
-aGZH7FaAwtd3bBeKXRTsasZLfEA/K2AOIucquehEH8Nkprjn6XlDbZf/1zfAqID/
-lk/QTo3uhyYjj4O3G8VSZ9PCQF/n918FDOY6DtnjmY3z0ZjAZv95sf8JBbFZVHSF
-ovmsWpWbRXmgorswY8yeL/jWCJ5Zp0SQhT2Bj2OmwjmNgDNnbp9BxjGHpmfJ/pxo
-lJ1vDfITYYOWWejBQE6A+fsk4CQ/0IwE4jNA9MI/03yXv8qoT2eEOTsovIYMpn/9
-0UjgufiiBfYHXXlAVsdHcHDfL3RxpJpFJC6M4xVLNQ0nF4gfOP4Ek2JhWEntCbTZ
-je9xcvebgb675DuaAOim0fkcbPz5VRMXuw6FjaX/x6j1AgMBAAEwDQYJKoZIhvcN
-AQELBQADggIBADng/A4RceeZKarKnqv3+TVBmxUrnbzUdwlrRwGFtEQZ1cVG53zP
-hlfnP/zyMsyG77utJbcaKaAqOrf0XHiiDNKe/ScfCd7K0pdoS52jhenvCD8E7hko
-9Ut4lCec4SFXTpeXaP0E39plmaUfB+gStZqCVxb+kOfV1C7Q7fYnUI9WzJojm2G4
-IsRIEIlYn2qW7NTWUdVVprHGZgEE18MxB8aDmJV0VW/WbiiJmlNDDjHYznk5q33T
-SDIRzQUEul6Zo9QUEJYy9kYHYZwhI6BRuxEJzqt2fFiGBpJ5YSwD11GDOu8SMumV
-J9WwfjRpMbVjRKw0l7vQA0PrnsXt4oYzzuRUv9IQovA6CGzopCModOddrY3B1me6
-e5hGdIexZUFQthu0LFpdp1fNJPoGCtKsRKXgaqTDkt0Di4lOwwzZ0CrvEqZNKvjU
-keeeyuornLpaC218Qtz1AHWGLKqCfyZ0VuuNe7lrH/nGkWFzE91zr8bxiQJNGDOl
-V1RUB/s4hQwCRVgiYUdKsTsD01BBcsPVBFR20Xawij5LlsFi3Dx4fIYq/Y+aa9KV
-EXQO2FLxSHa0+BeKbQYjlyTcLAz0Q1qiHnUBU2Id7UQuAM25z1F4a6roHKiADxA5
-AZ07E2gWGFQWsuEwC1+IUrv3QZH2Z9fNgg3M4OLTfqPr4uZNkqwQ9FN2
------END CERTIFICATE-----`
-
-const localhostCertPem = `-----BEGIN CERTIFICATE-----
-MIID/DCCAeSgAwIBAgIFAt3gJswwDQYJKoZIhvcNAQELBQAwMTELMAkGA1UEBhMC
-VVMxEDAOBgNVBAoMB1Rlc3RPcmcxEDAOBgNVBAsMB1Rlc3QgQ0EwHhcNMjQwMjE1
-MjM0NjQwWhcNMjYwMjE0MjM0NjQwWjAUMRIwEAYDVQQDDAlsb2NhbGhvc3QwggEi
-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSMe7vDHmJPbPkZEaS6glrhhS
-32jG3k+Prr0ikY3fmYLFkugfM/8LZ5W9Q03EMSxyvxKH8mo1lpM6VJqWhXmyL04K
-zCNQvihSF4pQDJwAB8/4BC0N8DB/s2hQyfTrMAa4z4BnJN2cF0hcAXrMJPpi+0GE
-YfTSNn0BaEZMgs7cmrMwB+1m9UL02pOrwVQE6C7ddCsNis+zHP7RZ+qsD7ruv3Rr
-eyzlOJJpPpB58lcIMslttUu9+yMHKZ3Zzheiw0GeMWYFthmVWij+Qazjf7MR7for
-DJrBHwEhuw/USBdCC3hSLnFKG630znA0+mhEt+p1j+HGNqjSG7IDJtEhieZtAgMB
-AAGjODA2MAkGA1UdEwQCMAAwFAYDVR0RBA0wC4IJbG9jYWxob3N0MBMGA1UdJQQM
-MAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4ICAQC86mglEBlF90lPXXRVASta
-RapgNy+owfIIZuapWVafu2sBbPLE6OoeX9q6Kubi6gqxJi6DliPSOWSoZqmoGSE3
-LB3IOSnhp9lx2lNqgepy03grNSJN326dUY92d54eu46yroJvKSUMG9Yt73BW9qLK
-GKumvOyeqUhAYlMABRZxSzsDVYYTFN23NI0AKEoM12BACP8c7oV4zHdCtg7JZ0Tq
-Q8t/s+gkzVHZWeBEaYQ/Pz/uAlUbp2FDXTFSfmZfHhTuRSVUz1uxNG/XVcbtH68w
-NIH/2jaN+CUCREE0pVzcvTGQpNi3wU96NRWo62KwjNzfvlkpfC/NYG5MUrY/8mnI
-2j7RKW1iRwyXEKXMKq85st2MxUIDhieIVi6GopDDMZZB5IMf5iE9k8P0IjUK0G/G
-PS5KnzfZqQ5hxY8oCI1in2wbQGq6Yh0mErPnzx3y/hA/S/a4UmtkTZTbhejuZqjb
-JqAVf4BKWwHaX/AqdmcSD6/ONdaSm/rb5eE1bkA8FY+2xOfcfaBiUTHa7PjR2xPH
-PePwrZMfX/5WqP8xb3u0OybEyhcxExMf7U3o5Peb4vZXfgspt/yFPAiKYv6atAYC
-YuFerblj5umVXbKaXp50Y6blXSNWd3RokKtr2ZZ6rB+L0gmgRrdisu2TjfdsP2ig
-svo/XmxH58h0n+Gu5dfU+w==
------END CERTIFICATE-----`
-
-const localhostKeyPem = `-----BEGIN PRIVATE KEY-----
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDjSMe7vDHmJPbP
-kZEaS6glrhhS32jG3k+Prr0ikY3fmYLFkugfM/8LZ5W9Q03EMSxyvxKH8mo1lpM6
-VJqWhXmyL04KzCNQvihSF4pQDJwAB8/4BC0N8DB/s2hQyfTrMAa4z4BnJN2cF0hc
-AXrMJPpi+0GEYfTSNn0BaEZMgs7cmrMwB+1m9UL02pOrwVQE6C7ddCsNis+zHP7R
-Z+qsD7ruv3RreyzlOJJpPpB58lcIMslttUu9+yMHKZ3Zzheiw0GeMWYFthmVWij+
-Qazjf7MR7forDJrBHwEhuw/USBdCC3hSLnFKG630znA0+mhEt+p1j+HGNqjSG7ID
-JtEhieZtAgMBAAECggEANPpF9DCNwQNktEVN+T8hVocaDFce6Rvwl6E3XNNoqnHx
-1XPEv2EzVckzUgZaHh0IK0b2XtHWh98tOi92SRebojj8i+/BW5S3eUsbZkVKJ4eq
-pjjy94jBBUMgUZSBjkCHkJRtbZ1eOoAC0c9WfDcyVdgTEXRzyHwC700K9dKXvTux
-gJAvI7KA9kCy86793tbooKUNFWIh4sVTA8Bg78/6XTrXSgOnn1u5433HX+j8eQBD
-azlA038hsJwMgDL5EYIL8lLp7PqnFzExQ+KToK3+MpRhqLUUs8dYRrxxWWJ86GTn
-NeVA+wLVmNN8CQYNdoiPNCRLzxycLUteGpEGyRkiUQKBgQD4ewiNqpX+GQbt+3g/
-0JvDLTUKMJt6T5VF9m1V/BjzDn27gBnWZ2AhmokXtHd2Lln0R98f4vIr/pNvsh5e
-i+/YEesqAUB7fGeyGP8fyWv4JmJ2LW9U3Q4gSHveX5brsr37aclFQwCCLgSF4Sps
-b035mZ7LRCGtbMhK67ZjEIgKOwKBgQDqKYpFmEfdAvJC4AwvypLy1cHQcwkWKUqf
-99A0SlOEsD2f5tb0K5tJEeG7k0QbEc60G+eINwFezivp+mF5VR1TWo4F2zlrqFOW
-hGZJvvOj2d88cqzvZ1D2EDO6pGwnjnfK4znR/2aBlbPHqaWk4bbMg+963ekWT66C
-z5gXSjAfdwKBgQC9BOrGyaN8PhGVa5xX/xreaD9W1w8PBgcpx4H4zOM10io3PgVp
-og3wwhvTmobdsfjf6OSE3yEV8ny5lSehCJaVKVxZAcbJqSNAyd8ZkSG/DYQNHhb4
-2Yfravg/ezvVZI08+YYQWB3E6birF1QsVKdeXkv7mIJ96KicxZ5i0aqLDQKBgQCm
-NwZnkEiyoTzGK7N62RimNwV0qbNxf63xDz9DXt8Z+OBFeN5sQ+feXksVktttO562
-Snh3QFRAr6iMVaaLMde3KzhU/+AqgzmSRjk1b84SKL1Fc0E+TuAxSh7uBXigO4jd
-A54valOg+Fq9B7cE6xOO6Lg9RvgFVlpRkHotTgQK0QKBgFHI5lMXMYydeAT59zb5
-mIFoFLOJ+JZ4nvoNu1uFQCVKH0bARK3t8oWL7ZCRtc8vANiFS8I/JTQVO1HhW3NE
-fjl8EwIhuijeojU23fzVlFdXjGGzXqHO5Bm0nDuRV6XirMF5+Lh6w+y8UYLketwc
-4ru0SF3ayA6bVHGXEeS5TOkv
------END PRIVATE KEY-----`
-
+import (
+	"github.com/Cloud-Foundations/keymaster/misc/testcerts"
+)
 
+var rootCAPem = testcerts.RootCertPem
+var localhostCertPem = testcerts.LocalHostCertPem
+var localhostKeyPem = testcerts.LocalHostKeyPem
diff --git a/cmd/keymasterd/testcerts_test.go b/cmd/keymasterd/testcerts_test.go
index f4d348d2..c0882dac 100644
--- a/cmd/keymasterd/testcerts_test.go
+++ b/cmd/keymasterd/testcerts_test.go
@@ -1,86 +1,9 @@
 package main
 
-const rootCAPem = `-----BEGIN CERTIFICATE-----
-MIIE1jCCAr4CAQowDQYJKoZIhvcNAQELBQAwMTELMAkGA1UEBhMCVVMxEDAOBgNV
-BAoMB1Rlc3RPcmcxEDAOBgNVBAsMB1Rlc3QgQ0EwHhcNMjEwMjA1MDA1NDUwWhcN
-NDEwMTMxMDA1NDUwWjAxMQswCQYDVQQGEwJVUzEQMA4GA1UECgwHVGVzdE9yZzEQ
-MA4GA1UECwwHVGVzdCBDQTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
-AMepGyjzJkXS3gCBStImA3I/OY6us1MqzqQGeRJIL/13n9PHqPfXIjadJ7z0krFB
-xXGT2WyVRhoc+tP1K8rfwRjNtMDjxtzphDLaUSvjhB5FvOhR0Ch6ByrFlP507FVa
-MeQo+8Bex9q0SaHXtGLM5hWuYQpG6dpOlXl6DKQwqYjptzL/RfMwJKukaoc0J5e+
-3xNR3XhC+ejMHp99rEORC4aLhfWhwfOhtIslIVI/HXKu72/lxIMpkhaoObBgqdQC
-3e5KMg+/liZ6y/HOhN49pKuNq1SfKy6tOpI4fwZnWvKviNx8E16P4JlqPdLPAULb
-aGZH7FaAwtd3bBeKXRTsasZLfEA/K2AOIucquehEH8Nkprjn6XlDbZf/1zfAqID/
-lk/QTo3uhyYjj4O3G8VSZ9PCQF/n918FDOY6DtnjmY3z0ZjAZv95sf8JBbFZVHSF
-ovmsWpWbRXmgorswY8yeL/jWCJ5Zp0SQhT2Bj2OmwjmNgDNnbp9BxjGHpmfJ/pxo
-lJ1vDfITYYOWWejBQE6A+fsk4CQ/0IwE4jNA9MI/03yXv8qoT2eEOTsovIYMpn/9
-0UjgufiiBfYHXXlAVsdHcHDfL3RxpJpFJC6M4xVLNQ0nF4gfOP4Ek2JhWEntCbTZ
-je9xcvebgb675DuaAOim0fkcbPz5VRMXuw6FjaX/x6j1AgMBAAEwDQYJKoZIhvcN
-AQELBQADggIBADng/A4RceeZKarKnqv3+TVBmxUrnbzUdwlrRwGFtEQZ1cVG53zP
-hlfnP/zyMsyG77utJbcaKaAqOrf0XHiiDNKe/ScfCd7K0pdoS52jhenvCD8E7hko
-9Ut4lCec4SFXTpeXaP0E39plmaUfB+gStZqCVxb+kOfV1C7Q7fYnUI9WzJojm2G4
-IsRIEIlYn2qW7NTWUdVVprHGZgEE18MxB8aDmJV0VW/WbiiJmlNDDjHYznk5q33T
-SDIRzQUEul6Zo9QUEJYy9kYHYZwhI6BRuxEJzqt2fFiGBpJ5YSwD11GDOu8SMumV
-J9WwfjRpMbVjRKw0l7vQA0PrnsXt4oYzzuRUv9IQovA6CGzopCModOddrY3B1me6
-e5hGdIexZUFQthu0LFpdp1fNJPoGCtKsRKXgaqTDkt0Di4lOwwzZ0CrvEqZNKvjU
-keeeyuornLpaC218Qtz1AHWGLKqCfyZ0VuuNe7lrH/nGkWFzE91zr8bxiQJNGDOl
-V1RUB/s4hQwCRVgiYUdKsTsD01BBcsPVBFR20Xawij5LlsFi3Dx4fIYq/Y+aa9KV
-EXQO2FLxSHa0+BeKbQYjlyTcLAz0Q1qiHnUBU2Id7UQuAM25z1F4a6roHKiADxA5
-AZ07E2gWGFQWsuEwC1+IUrv3QZH2Z9fNgg3M4OLTfqPr4uZNkqwQ9FN2
------END CERTIFICATE-----`
-
-const localhostCertPem = `-----BEGIN CERTIFICATE-----
-MIID/DCCAeSgAwIBAgIFAt3gJswwDQYJKoZIhvcNAQELBQAwMTELMAkGA1UEBhMC
-VVMxEDAOBgNVBAoMB1Rlc3RPcmcxEDAOBgNVBAsMB1Rlc3QgQ0EwHhcNMjQwMjE1
-MjM0NjQwWhcNMjYwMjE0MjM0NjQwWjAUMRIwEAYDVQQDDAlsb2NhbGhvc3QwggEi
-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSMe7vDHmJPbPkZEaS6glrhhS
-32jG3k+Prr0ikY3fmYLFkugfM/8LZ5W9Q03EMSxyvxKH8mo1lpM6VJqWhXmyL04K
-zCNQvihSF4pQDJwAB8/4BC0N8DB/s2hQyfTrMAa4z4BnJN2cF0hcAXrMJPpi+0GE
-YfTSNn0BaEZMgs7cmrMwB+1m9UL02pOrwVQE6C7ddCsNis+zHP7RZ+qsD7ruv3Rr
-eyzlOJJpPpB58lcIMslttUu9+yMHKZ3Zzheiw0GeMWYFthmVWij+Qazjf7MR7for
-DJrBHwEhuw/USBdCC3hSLnFKG630znA0+mhEt+p1j+HGNqjSG7IDJtEhieZtAgMB
-AAGjODA2MAkGA1UdEwQCMAAwFAYDVR0RBA0wC4IJbG9jYWxob3N0MBMGA1UdJQQM
-MAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4ICAQC86mglEBlF90lPXXRVASta
-RapgNy+owfIIZuapWVafu2sBbPLE6OoeX9q6Kubi6gqxJi6DliPSOWSoZqmoGSE3
-LB3IOSnhp9lx2lNqgepy03grNSJN326dUY92d54eu46yroJvKSUMG9Yt73BW9qLK
-GKumvOyeqUhAYlMABRZxSzsDVYYTFN23NI0AKEoM12BACP8c7oV4zHdCtg7JZ0Tq
-Q8t/s+gkzVHZWeBEaYQ/Pz/uAlUbp2FDXTFSfmZfHhTuRSVUz1uxNG/XVcbtH68w
-NIH/2jaN+CUCREE0pVzcvTGQpNi3wU96NRWo62KwjNzfvlkpfC/NYG5MUrY/8mnI
-2j7RKW1iRwyXEKXMKq85st2MxUIDhieIVi6GopDDMZZB5IMf5iE9k8P0IjUK0G/G
-PS5KnzfZqQ5hxY8oCI1in2wbQGq6Yh0mErPnzx3y/hA/S/a4UmtkTZTbhejuZqjb
-JqAVf4BKWwHaX/AqdmcSD6/ONdaSm/rb5eE1bkA8FY+2xOfcfaBiUTHa7PjR2xPH
-PePwrZMfX/5WqP8xb3u0OybEyhcxExMf7U3o5Peb4vZXfgspt/yFPAiKYv6atAYC
-YuFerblj5umVXbKaXp50Y6blXSNWd3RokKtr2ZZ6rB+L0gmgRrdisu2TjfdsP2ig
-svo/XmxH58h0n+Gu5dfU+w==
------END CERTIFICATE-----`
-
-const localhostKeyPem = `-----BEGIN PRIVATE KEY-----
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDjSMe7vDHmJPbP
-kZEaS6glrhhS32jG3k+Prr0ikY3fmYLFkugfM/8LZ5W9Q03EMSxyvxKH8mo1lpM6
-VJqWhXmyL04KzCNQvihSF4pQDJwAB8/4BC0N8DB/s2hQyfTrMAa4z4BnJN2cF0hc
-AXrMJPpi+0GEYfTSNn0BaEZMgs7cmrMwB+1m9UL02pOrwVQE6C7ddCsNis+zHP7R
-Z+qsD7ruv3RreyzlOJJpPpB58lcIMslttUu9+yMHKZ3Zzheiw0GeMWYFthmVWij+
-Qazjf7MR7forDJrBHwEhuw/USBdCC3hSLnFKG630znA0+mhEt+p1j+HGNqjSG7ID
-JtEhieZtAgMBAAECggEANPpF9DCNwQNktEVN+T8hVocaDFce6Rvwl6E3XNNoqnHx
-1XPEv2EzVckzUgZaHh0IK0b2XtHWh98tOi92SRebojj8i+/BW5S3eUsbZkVKJ4eq
-pjjy94jBBUMgUZSBjkCHkJRtbZ1eOoAC0c9WfDcyVdgTEXRzyHwC700K9dKXvTux
-gJAvI7KA9kCy86793tbooKUNFWIh4sVTA8Bg78/6XTrXSgOnn1u5433HX+j8eQBD
-azlA038hsJwMgDL5EYIL8lLp7PqnFzExQ+KToK3+MpRhqLUUs8dYRrxxWWJ86GTn
-NeVA+wLVmNN8CQYNdoiPNCRLzxycLUteGpEGyRkiUQKBgQD4ewiNqpX+GQbt+3g/
-0JvDLTUKMJt6T5VF9m1V/BjzDn27gBnWZ2AhmokXtHd2Lln0R98f4vIr/pNvsh5e
-i+/YEesqAUB7fGeyGP8fyWv4JmJ2LW9U3Q4gSHveX5brsr37aclFQwCCLgSF4Sps
-b035mZ7LRCGtbMhK67ZjEIgKOwKBgQDqKYpFmEfdAvJC4AwvypLy1cHQcwkWKUqf
-99A0SlOEsD2f5tb0K5tJEeG7k0QbEc60G+eINwFezivp+mF5VR1TWo4F2zlrqFOW
-hGZJvvOj2d88cqzvZ1D2EDO6pGwnjnfK4znR/2aBlbPHqaWk4bbMg+963ekWT66C
-z5gXSjAfdwKBgQC9BOrGyaN8PhGVa5xX/xreaD9W1w8PBgcpx4H4zOM10io3PgVp
-og3wwhvTmobdsfjf6OSE3yEV8ny5lSehCJaVKVxZAcbJqSNAyd8ZkSG/DYQNHhb4
-2Yfravg/ezvVZI08+YYQWB3E6birF1QsVKdeXkv7mIJ96KicxZ5i0aqLDQKBgQCm
-NwZnkEiyoTzGK7N62RimNwV0qbNxf63xDz9DXt8Z+OBFeN5sQ+feXksVktttO562
-Snh3QFRAr6iMVaaLMde3KzhU/+AqgzmSRjk1b84SKL1Fc0E+TuAxSh7uBXigO4jd
-A54valOg+Fq9B7cE6xOO6Lg9RvgFVlpRkHotTgQK0QKBgFHI5lMXMYydeAT59zb5
-mIFoFLOJ+JZ4nvoNu1uFQCVKH0bARK3t8oWL7ZCRtc8vANiFS8I/JTQVO1HhW3NE
-fjl8EwIhuijeojU23fzVlFdXjGGzXqHO5Bm0nDuRV6XirMF5+Lh6w+y8UYLketwc
-4ru0SF3ayA6bVHGXEeS5TOkv
------END PRIVATE KEY-----`
-
+import (
+	"github.com/Cloud-Foundations/keymaster/misc/testcerts"
+)
 
+var rootCAPem = testcerts.RootCertPem
+var localhostCertPem = testcerts.LocalHostCertPem
+var localhostKeyPem = testcerts.LocalHostKeyPem
diff --git a/lib/authutil/testcerts_test.go b/lib/authutil/testcerts_test.go
index d0159c29..f249fe2f 100644
--- a/lib/authutil/testcerts_test.go
+++ b/lib/authutil/testcerts_test.go
@@ -1,86 +1,9 @@
 package authutil
 
-const rootCAPem = `-----BEGIN CERTIFICATE-----
-MIIE1jCCAr4CAQowDQYJKoZIhvcNAQELBQAwMTELMAkGA1UEBhMCVVMxEDAOBgNV
-BAoMB1Rlc3RPcmcxEDAOBgNVBAsMB1Rlc3QgQ0EwHhcNMjEwMjA1MDA1NDUwWhcN
-NDEwMTMxMDA1NDUwWjAxMQswCQYDVQQGEwJVUzEQMA4GA1UECgwHVGVzdE9yZzEQ
-MA4GA1UECwwHVGVzdCBDQTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
-AMepGyjzJkXS3gCBStImA3I/OY6us1MqzqQGeRJIL/13n9PHqPfXIjadJ7z0krFB
-xXGT2WyVRhoc+tP1K8rfwRjNtMDjxtzphDLaUSvjhB5FvOhR0Ch6ByrFlP507FVa
-MeQo+8Bex9q0SaHXtGLM5hWuYQpG6dpOlXl6DKQwqYjptzL/RfMwJKukaoc0J5e+
-3xNR3XhC+ejMHp99rEORC4aLhfWhwfOhtIslIVI/HXKu72/lxIMpkhaoObBgqdQC
-3e5KMg+/liZ6y/HOhN49pKuNq1SfKy6tOpI4fwZnWvKviNx8E16P4JlqPdLPAULb
-aGZH7FaAwtd3bBeKXRTsasZLfEA/K2AOIucquehEH8Nkprjn6XlDbZf/1zfAqID/
-lk/QTo3uhyYjj4O3G8VSZ9PCQF/n918FDOY6DtnjmY3z0ZjAZv95sf8JBbFZVHSF
-ovmsWpWbRXmgorswY8yeL/jWCJ5Zp0SQhT2Bj2OmwjmNgDNnbp9BxjGHpmfJ/pxo
-lJ1vDfITYYOWWejBQE6A+fsk4CQ/0IwE4jNA9MI/03yXv8qoT2eEOTsovIYMpn/9
-0UjgufiiBfYHXXlAVsdHcHDfL3RxpJpFJC6M4xVLNQ0nF4gfOP4Ek2JhWEntCbTZ
-je9xcvebgb675DuaAOim0fkcbPz5VRMXuw6FjaX/x6j1AgMBAAEwDQYJKoZIhvcN
-AQELBQADggIBADng/A4RceeZKarKnqv3+TVBmxUrnbzUdwlrRwGFtEQZ1cVG53zP
-hlfnP/zyMsyG77utJbcaKaAqOrf0XHiiDNKe/ScfCd7K0pdoS52jhenvCD8E7hko
-9Ut4lCec4SFXTpeXaP0E39plmaUfB+gStZqCVxb+kOfV1C7Q7fYnUI9WzJojm2G4
-IsRIEIlYn2qW7NTWUdVVprHGZgEE18MxB8aDmJV0VW/WbiiJmlNDDjHYznk5q33T
-SDIRzQUEul6Zo9QUEJYy9kYHYZwhI6BRuxEJzqt2fFiGBpJ5YSwD11GDOu8SMumV
-J9WwfjRpMbVjRKw0l7vQA0PrnsXt4oYzzuRUv9IQovA6CGzopCModOddrY3B1me6
-e5hGdIexZUFQthu0LFpdp1fNJPoGCtKsRKXgaqTDkt0Di4lOwwzZ0CrvEqZNKvjU
-keeeyuornLpaC218Qtz1AHWGLKqCfyZ0VuuNe7lrH/nGkWFzE91zr8bxiQJNGDOl
-V1RUB/s4hQwCRVgiYUdKsTsD01BBcsPVBFR20Xawij5LlsFi3Dx4fIYq/Y+aa9KV
-EXQO2FLxSHa0+BeKbQYjlyTcLAz0Q1qiHnUBU2Id7UQuAM25z1F4a6roHKiADxA5
-AZ07E2gWGFQWsuEwC1+IUrv3QZH2Z9fNgg3M4OLTfqPr4uZNkqwQ9FN2
------END CERTIFICATE-----`
-
-const localhostCertPem = `-----BEGIN CERTIFICATE-----
-MIID/DCCAeSgAwIBAgIFAt3gJswwDQYJKoZIhvcNAQELBQAwMTELMAkGA1UEBhMC
-VVMxEDAOBgNVBAoMB1Rlc3RPcmcxEDAOBgNVBAsMB1Rlc3QgQ0EwHhcNMjEwMjA1
-MDA1NDUwWhcNNDEwMTMxMDA1NDUwWjAUMRIwEAYDVQQDDAlsb2NhbGhvc3QwggEi
-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSMe7vDHmJPbPkZEaS6glrhhS
-32jG3k+Prr0ikY3fmYLFkugfM/8LZ5W9Q03EMSxyvxKH8mo1lpM6VJqWhXmyL04K
-zCNQvihSF4pQDJwAB8/4BC0N8DB/s2hQyfTrMAa4z4BnJN2cF0hcAXrMJPpi+0GE
-YfTSNn0BaEZMgs7cmrMwB+1m9UL02pOrwVQE6C7ddCsNis+zHP7RZ+qsD7ruv3Rr
-eyzlOJJpPpB58lcIMslttUu9+yMHKZ3Zzheiw0GeMWYFthmVWij+Qazjf7MR7for
-DJrBHwEhuw/USBdCC3hSLnFKG630znA0+mhEt+p1j+HGNqjSG7IDJtEhieZtAgMB
-AAGjODA2MAkGA1UdEwQCMAAwFAYDVR0RBA0wC4IJbG9jYWxob3N0MBMGA1UdJQQM
-MAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4ICAQC9ZAS+Do5OFQjpMAzWRATv
-togcVhgwdSHJWYPzO+NyMX1Zsr3aFcuoFuYW5DduGb8dRzXC1IOof9J8rMbubqY0
-+wZhpZ4fuxd2n08izhpk+033W+385cCjloqYZXzo7L9vHJK4M5/n68RIdmFjIxD6
-uvJ0LrnBCEWL6VNjwiFoa7VxXLhAR797l5xEOXP2AVFA3lwnOxbKTgMU10VYk3XC
-raNZS4CByDsNJU67IeKz/4nlPjltttKJATfEsL6zmre4GWSidMVEv5y75fA5Hogp
-gKP+eXoAFNk69PXpULtvzpEqCzZbZfcWMFULczPv4RvGD/q18PDDJ7MCsflTrADf
-OMY16QGhcsb1tjZtk9JYU7CIYHKeljIEW1vmfA6xOjyXTavAR9XHQRNpXTpdd1C9
-GQJ8Y70jYoEE/J0GjEZEgufCOdqBEC1mQV68cfNiYV1LiyqZrC83YSuA0UdhvTEV
-O15LJQZcVK2ycpKu85FaVLhwlrJUgWuN1227VFS42ApSJSCLOIgNhN20wwJFx1Ax
-gkgoHV/70q0CtR0ZIDWvLwA/fXZQNboAurPR0/YMtn63PDYaGThnrnxSTaKfYBhm
-lGJaD3a4/wRoZtWYkVLKa8DO3k28P9WZn9gAidGvkHgmSLYa/TftPr6SnkP4QE8C
-fdyL8KJZCtk2TBQRU7U1FQ==
------END CERTIFICATE-----`
-
-const localhostKeyPem = `-----BEGIN PRIVATE KEY-----
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDjSMe7vDHmJPbP
-kZEaS6glrhhS32jG3k+Prr0ikY3fmYLFkugfM/8LZ5W9Q03EMSxyvxKH8mo1lpM6
-VJqWhXmyL04KzCNQvihSF4pQDJwAB8/4BC0N8DB/s2hQyfTrMAa4z4BnJN2cF0hc
-AXrMJPpi+0GEYfTSNn0BaEZMgs7cmrMwB+1m9UL02pOrwVQE6C7ddCsNis+zHP7R
-Z+qsD7ruv3RreyzlOJJpPpB58lcIMslttUu9+yMHKZ3Zzheiw0GeMWYFthmVWij+
-Qazjf7MR7forDJrBHwEhuw/USBdCC3hSLnFKG630znA0+mhEt+p1j+HGNqjSG7ID
-JtEhieZtAgMBAAECggEANPpF9DCNwQNktEVN+T8hVocaDFce6Rvwl6E3XNNoqnHx
-1XPEv2EzVckzUgZaHh0IK0b2XtHWh98tOi92SRebojj8i+/BW5S3eUsbZkVKJ4eq
-pjjy94jBBUMgUZSBjkCHkJRtbZ1eOoAC0c9WfDcyVdgTEXRzyHwC700K9dKXvTux
-gJAvI7KA9kCy86793tbooKUNFWIh4sVTA8Bg78/6XTrXSgOnn1u5433HX+j8eQBD
-azlA038hsJwMgDL5EYIL8lLp7PqnFzExQ+KToK3+MpRhqLUUs8dYRrxxWWJ86GTn
-NeVA+wLVmNN8CQYNdoiPNCRLzxycLUteGpEGyRkiUQKBgQD4ewiNqpX+GQbt+3g/
-0JvDLTUKMJt6T5VF9m1V/BjzDn27gBnWZ2AhmokXtHd2Lln0R98f4vIr/pNvsh5e
-i+/YEesqAUB7fGeyGP8fyWv4JmJ2LW9U3Q4gSHveX5brsr37aclFQwCCLgSF4Sps
-b035mZ7LRCGtbMhK67ZjEIgKOwKBgQDqKYpFmEfdAvJC4AwvypLy1cHQcwkWKUqf
-99A0SlOEsD2f5tb0K5tJEeG7k0QbEc60G+eINwFezivp+mF5VR1TWo4F2zlrqFOW
-hGZJvvOj2d88cqzvZ1D2EDO6pGwnjnfK4znR/2aBlbPHqaWk4bbMg+963ekWT66C
-z5gXSjAfdwKBgQC9BOrGyaN8PhGVa5xX/xreaD9W1w8PBgcpx4H4zOM10io3PgVp
-og3wwhvTmobdsfjf6OSE3yEV8ny5lSehCJaVKVxZAcbJqSNAyd8ZkSG/DYQNHhb4
-2Yfravg/ezvVZI08+YYQWB3E6birF1QsVKdeXkv7mIJ96KicxZ5i0aqLDQKBgQCm
-NwZnkEiyoTzGK7N62RimNwV0qbNxf63xDz9DXt8Z+OBFeN5sQ+feXksVktttO562
-Snh3QFRAr6iMVaaLMde3KzhU/+AqgzmSRjk1b84SKL1Fc0E+TuAxSh7uBXigO4jd
-A54valOg+Fq9B7cE6xOO6Lg9RvgFVlpRkHotTgQK0QKBgFHI5lMXMYydeAT59zb5
-mIFoFLOJ+JZ4nvoNu1uFQCVKH0bARK3t8oWL7ZCRtc8vANiFS8I/JTQVO1HhW3NE
-fjl8EwIhuijeojU23fzVlFdXjGGzXqHO5Bm0nDuRV6XirMF5+Lh6w+y8UYLketwc
-4ru0SF3ayA6bVHGXEeS5TOkv
------END PRIVATE KEY-----`
-
+import (
+	"github.com/Cloud-Foundations/keymaster/misc/testcerts"
+)
 
+var rootCAPem = testcerts.RootCertPem
+var localhostCertPem = testcerts.LocalHostCertPem
+var localhostKeyPem = testcerts.LocalHostKeyPem
diff --git a/lib/client/twofa/testcerts_test.go b/lib/client/twofa/testcerts_test.go
index 8ae78ffa..b6b2a6f1 100644
--- a/lib/client/twofa/testcerts_test.go
+++ b/lib/client/twofa/testcerts_test.go
@@ -1,86 +1,9 @@
 package twofa
 
-const rootCAPem = `-----BEGIN CERTIFICATE-----
-MIIE1jCCAr4CAQowDQYJKoZIhvcNAQELBQAwMTELMAkGA1UEBhMCVVMxEDAOBgNV
-BAoMB1Rlc3RPcmcxEDAOBgNVBAsMB1Rlc3QgQ0EwHhcNMjEwMjA1MDA1NDUwWhcN
-NDEwMTMxMDA1NDUwWjAxMQswCQYDVQQGEwJVUzEQMA4GA1UECgwHVGVzdE9yZzEQ
-MA4GA1UECwwHVGVzdCBDQTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
-AMepGyjzJkXS3gCBStImA3I/OY6us1MqzqQGeRJIL/13n9PHqPfXIjadJ7z0krFB
-xXGT2WyVRhoc+tP1K8rfwRjNtMDjxtzphDLaUSvjhB5FvOhR0Ch6ByrFlP507FVa
-MeQo+8Bex9q0SaHXtGLM5hWuYQpG6dpOlXl6DKQwqYjptzL/RfMwJKukaoc0J5e+
-3xNR3XhC+ejMHp99rEORC4aLhfWhwfOhtIslIVI/HXKu72/lxIMpkhaoObBgqdQC
-3e5KMg+/liZ6y/HOhN49pKuNq1SfKy6tOpI4fwZnWvKviNx8E16P4JlqPdLPAULb
-aGZH7FaAwtd3bBeKXRTsasZLfEA/K2AOIucquehEH8Nkprjn6XlDbZf/1zfAqID/
-lk/QTo3uhyYjj4O3G8VSZ9PCQF/n918FDOY6DtnjmY3z0ZjAZv95sf8JBbFZVHSF
-ovmsWpWbRXmgorswY8yeL/jWCJ5Zp0SQhT2Bj2OmwjmNgDNnbp9BxjGHpmfJ/pxo
-lJ1vDfITYYOWWejBQE6A+fsk4CQ/0IwE4jNA9MI/03yXv8qoT2eEOTsovIYMpn/9
-0UjgufiiBfYHXXlAVsdHcHDfL3RxpJpFJC6M4xVLNQ0nF4gfOP4Ek2JhWEntCbTZ
-je9xcvebgb675DuaAOim0fkcbPz5VRMXuw6FjaX/x6j1AgMBAAEwDQYJKoZIhvcN
-AQELBQADggIBADng/A4RceeZKarKnqv3+TVBmxUrnbzUdwlrRwGFtEQZ1cVG53zP
-hlfnP/zyMsyG77utJbcaKaAqOrf0XHiiDNKe/ScfCd7K0pdoS52jhenvCD8E7hko
-9Ut4lCec4SFXTpeXaP0E39plmaUfB+gStZqCVxb+kOfV1C7Q7fYnUI9WzJojm2G4
-IsRIEIlYn2qW7NTWUdVVprHGZgEE18MxB8aDmJV0VW/WbiiJmlNDDjHYznk5q33T
-SDIRzQUEul6Zo9QUEJYy9kYHYZwhI6BRuxEJzqt2fFiGBpJ5YSwD11GDOu8SMumV
-J9WwfjRpMbVjRKw0l7vQA0PrnsXt4oYzzuRUv9IQovA6CGzopCModOddrY3B1me6
-e5hGdIexZUFQthu0LFpdp1fNJPoGCtKsRKXgaqTDkt0Di4lOwwzZ0CrvEqZNKvjU
-keeeyuornLpaC218Qtz1AHWGLKqCfyZ0VuuNe7lrH/nGkWFzE91zr8bxiQJNGDOl
-V1RUB/s4hQwCRVgiYUdKsTsD01BBcsPVBFR20Xawij5LlsFi3Dx4fIYq/Y+aa9KV
-EXQO2FLxSHa0+BeKbQYjlyTcLAz0Q1qiHnUBU2Id7UQuAM25z1F4a6roHKiADxA5
-AZ07E2gWGFQWsuEwC1+IUrv3QZH2Z9fNgg3M4OLTfqPr4uZNkqwQ9FN2
------END CERTIFICATE-----`
-
-const localhostCertPem = `-----BEGIN CERTIFICATE-----
-MIID/DCCAeSgAwIBAgIFAt3gJswwDQYJKoZIhvcNAQELBQAwMTELMAkGA1UEBhMC
-VVMxEDAOBgNVBAoMB1Rlc3RPcmcxEDAOBgNVBAsMB1Rlc3QgQ0EwHhcNMjEwMjA1
-MDA1NDUwWhcNNDEwMTMxMDA1NDUwWjAUMRIwEAYDVQQDDAlsb2NhbGhvc3QwggEi
-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSMe7vDHmJPbPkZEaS6glrhhS
-32jG3k+Prr0ikY3fmYLFkugfM/8LZ5W9Q03EMSxyvxKH8mo1lpM6VJqWhXmyL04K
-zCNQvihSF4pQDJwAB8/4BC0N8DB/s2hQyfTrMAa4z4BnJN2cF0hcAXrMJPpi+0GE
-YfTSNn0BaEZMgs7cmrMwB+1m9UL02pOrwVQE6C7ddCsNis+zHP7RZ+qsD7ruv3Rr
-eyzlOJJpPpB58lcIMslttUu9+yMHKZ3Zzheiw0GeMWYFthmVWij+Qazjf7MR7for
-DJrBHwEhuw/USBdCC3hSLnFKG630znA0+mhEt+p1j+HGNqjSG7IDJtEhieZtAgMB
-AAGjODA2MAkGA1UdEwQCMAAwFAYDVR0RBA0wC4IJbG9jYWxob3N0MBMGA1UdJQQM
-MAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4ICAQC9ZAS+Do5OFQjpMAzWRATv
-togcVhgwdSHJWYPzO+NyMX1Zsr3aFcuoFuYW5DduGb8dRzXC1IOof9J8rMbubqY0
-+wZhpZ4fuxd2n08izhpk+033W+385cCjloqYZXzo7L9vHJK4M5/n68RIdmFjIxD6
-uvJ0LrnBCEWL6VNjwiFoa7VxXLhAR797l5xEOXP2AVFA3lwnOxbKTgMU10VYk3XC
-raNZS4CByDsNJU67IeKz/4nlPjltttKJATfEsL6zmre4GWSidMVEv5y75fA5Hogp
-gKP+eXoAFNk69PXpULtvzpEqCzZbZfcWMFULczPv4RvGD/q18PDDJ7MCsflTrADf
-OMY16QGhcsb1tjZtk9JYU7CIYHKeljIEW1vmfA6xOjyXTavAR9XHQRNpXTpdd1C9
-GQJ8Y70jYoEE/J0GjEZEgufCOdqBEC1mQV68cfNiYV1LiyqZrC83YSuA0UdhvTEV
-O15LJQZcVK2ycpKu85FaVLhwlrJUgWuN1227VFS42ApSJSCLOIgNhN20wwJFx1Ax
-gkgoHV/70q0CtR0ZIDWvLwA/fXZQNboAurPR0/YMtn63PDYaGThnrnxSTaKfYBhm
-lGJaD3a4/wRoZtWYkVLKa8DO3k28P9WZn9gAidGvkHgmSLYa/TftPr6SnkP4QE8C
-fdyL8KJZCtk2TBQRU7U1FQ==
------END CERTIFICATE-----`
-
-const localhostKeyPem = `-----BEGIN PRIVATE KEY-----
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDjSMe7vDHmJPbP
-kZEaS6glrhhS32jG3k+Prr0ikY3fmYLFkugfM/8LZ5W9Q03EMSxyvxKH8mo1lpM6
-VJqWhXmyL04KzCNQvihSF4pQDJwAB8/4BC0N8DB/s2hQyfTrMAa4z4BnJN2cF0hc
-AXrMJPpi+0GEYfTSNn0BaEZMgs7cmrMwB+1m9UL02pOrwVQE6C7ddCsNis+zHP7R
-Z+qsD7ruv3RreyzlOJJpPpB58lcIMslttUu9+yMHKZ3Zzheiw0GeMWYFthmVWij+
-Qazjf7MR7forDJrBHwEhuw/USBdCC3hSLnFKG630znA0+mhEt+p1j+HGNqjSG7ID
-JtEhieZtAgMBAAECggEANPpF9DCNwQNktEVN+T8hVocaDFce6Rvwl6E3XNNoqnHx
-1XPEv2EzVckzUgZaHh0IK0b2XtHWh98tOi92SRebojj8i+/BW5S3eUsbZkVKJ4eq
-pjjy94jBBUMgUZSBjkCHkJRtbZ1eOoAC0c9WfDcyVdgTEXRzyHwC700K9dKXvTux
-gJAvI7KA9kCy86793tbooKUNFWIh4sVTA8Bg78/6XTrXSgOnn1u5433HX+j8eQBD
-azlA038hsJwMgDL5EYIL8lLp7PqnFzExQ+KToK3+MpRhqLUUs8dYRrxxWWJ86GTn
-NeVA+wLVmNN8CQYNdoiPNCRLzxycLUteGpEGyRkiUQKBgQD4ewiNqpX+GQbt+3g/
-0JvDLTUKMJt6T5VF9m1V/BjzDn27gBnWZ2AhmokXtHd2Lln0R98f4vIr/pNvsh5e
-i+/YEesqAUB7fGeyGP8fyWv4JmJ2LW9U3Q4gSHveX5brsr37aclFQwCCLgSF4Sps
-b035mZ7LRCGtbMhK67ZjEIgKOwKBgQDqKYpFmEfdAvJC4AwvypLy1cHQcwkWKUqf
-99A0SlOEsD2f5tb0K5tJEeG7k0QbEc60G+eINwFezivp+mF5VR1TWo4F2zlrqFOW
-hGZJvvOj2d88cqzvZ1D2EDO6pGwnjnfK4znR/2aBlbPHqaWk4bbMg+963ekWT66C
-z5gXSjAfdwKBgQC9BOrGyaN8PhGVa5xX/xreaD9W1w8PBgcpx4H4zOM10io3PgVp
-og3wwhvTmobdsfjf6OSE3yEV8ny5lSehCJaVKVxZAcbJqSNAyd8ZkSG/DYQNHhb4
-2Yfravg/ezvVZI08+YYQWB3E6birF1QsVKdeXkv7mIJ96KicxZ5i0aqLDQKBgQCm
-NwZnkEiyoTzGK7N62RimNwV0qbNxf63xDz9DXt8Z+OBFeN5sQ+feXksVktttO562
-Snh3QFRAr6iMVaaLMde3KzhU/+AqgzmSRjk1b84SKL1Fc0E+TuAxSh7uBXigO4jd
-A54valOg+Fq9B7cE6xOO6Lg9RvgFVlpRkHotTgQK0QKBgFHI5lMXMYydeAT59zb5
-mIFoFLOJ+JZ4nvoNu1uFQCVKH0bARK3t8oWL7ZCRtc8vANiFS8I/JTQVO1HhW3NE
-fjl8EwIhuijeojU23fzVlFdXjGGzXqHO5Bm0nDuRV6XirMF5+Lh6w+y8UYLketwc
-4ru0SF3ayA6bVHGXEeS5TOkv
------END PRIVATE KEY-----`
-
+import (
+	"github.com/Cloud-Foundations/keymaster/misc/testcerts"
+)
 
+var rootCAPem = testcerts.RootCertPem
+var localhostCertPem = testcerts.LocalHostCertPem
+var localhostKeyPem = testcerts.LocalHostKeyPem
diff --git a/lib/pwauth/ldap/testcerts_test.go b/lib/pwauth/ldap/testcerts_test.go
index 03f0c219..c43ba15e 100644
--- a/lib/pwauth/ldap/testcerts_test.go
+++ b/lib/pwauth/ldap/testcerts_test.go
@@ -1,86 +1,9 @@
 package ldap
 
-const rootCAPem = `-----BEGIN CERTIFICATE-----
-MIIE1jCCAr4CAQowDQYJKoZIhvcNAQELBQAwMTELMAkGA1UEBhMCVVMxEDAOBgNV
-BAoMB1Rlc3RPcmcxEDAOBgNVBAsMB1Rlc3QgQ0EwHhcNMjEwMjA1MDA1NDUwWhcN
-NDEwMTMxMDA1NDUwWjAxMQswCQYDVQQGEwJVUzEQMA4GA1UECgwHVGVzdE9yZzEQ
-MA4GA1UECwwHVGVzdCBDQTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
-AMepGyjzJkXS3gCBStImA3I/OY6us1MqzqQGeRJIL/13n9PHqPfXIjadJ7z0krFB
-xXGT2WyVRhoc+tP1K8rfwRjNtMDjxtzphDLaUSvjhB5FvOhR0Ch6ByrFlP507FVa
-MeQo+8Bex9q0SaHXtGLM5hWuYQpG6dpOlXl6DKQwqYjptzL/RfMwJKukaoc0J5e+
-3xNR3XhC+ejMHp99rEORC4aLhfWhwfOhtIslIVI/HXKu72/lxIMpkhaoObBgqdQC
-3e5KMg+/liZ6y/HOhN49pKuNq1SfKy6tOpI4fwZnWvKviNx8E16P4JlqPdLPAULb
-aGZH7FaAwtd3bBeKXRTsasZLfEA/K2AOIucquehEH8Nkprjn6XlDbZf/1zfAqID/
-lk/QTo3uhyYjj4O3G8VSZ9PCQF/n918FDOY6DtnjmY3z0ZjAZv95sf8JBbFZVHSF
-ovmsWpWbRXmgorswY8yeL/jWCJ5Zp0SQhT2Bj2OmwjmNgDNnbp9BxjGHpmfJ/pxo
-lJ1vDfITYYOWWejBQE6A+fsk4CQ/0IwE4jNA9MI/03yXv8qoT2eEOTsovIYMpn/9
-0UjgufiiBfYHXXlAVsdHcHDfL3RxpJpFJC6M4xVLNQ0nF4gfOP4Ek2JhWEntCbTZ
-je9xcvebgb675DuaAOim0fkcbPz5VRMXuw6FjaX/x6j1AgMBAAEwDQYJKoZIhvcN
-AQELBQADggIBADng/A4RceeZKarKnqv3+TVBmxUrnbzUdwlrRwGFtEQZ1cVG53zP
-hlfnP/zyMsyG77utJbcaKaAqOrf0XHiiDNKe/ScfCd7K0pdoS52jhenvCD8E7hko
-9Ut4lCec4SFXTpeXaP0E39plmaUfB+gStZqCVxb+kOfV1C7Q7fYnUI9WzJojm2G4
-IsRIEIlYn2qW7NTWUdVVprHGZgEE18MxB8aDmJV0VW/WbiiJmlNDDjHYznk5q33T
-SDIRzQUEul6Zo9QUEJYy9kYHYZwhI6BRuxEJzqt2fFiGBpJ5YSwD11GDOu8SMumV
-J9WwfjRpMbVjRKw0l7vQA0PrnsXt4oYzzuRUv9IQovA6CGzopCModOddrY3B1me6
-e5hGdIexZUFQthu0LFpdp1fNJPoGCtKsRKXgaqTDkt0Di4lOwwzZ0CrvEqZNKvjU
-keeeyuornLpaC218Qtz1AHWGLKqCfyZ0VuuNe7lrH/nGkWFzE91zr8bxiQJNGDOl
-V1RUB/s4hQwCRVgiYUdKsTsD01BBcsPVBFR20Xawij5LlsFi3Dx4fIYq/Y+aa9KV
-EXQO2FLxSHa0+BeKbQYjlyTcLAz0Q1qiHnUBU2Id7UQuAM25z1F4a6roHKiADxA5
-AZ07E2gWGFQWsuEwC1+IUrv3QZH2Z9fNgg3M4OLTfqPr4uZNkqwQ9FN2
------END CERTIFICATE-----`
-
-const localhostCertPem = `-----BEGIN CERTIFICATE-----
-MIID/DCCAeSgAwIBAgIFAt3gJswwDQYJKoZIhvcNAQELBQAwMTELMAkGA1UEBhMC
-VVMxEDAOBgNVBAoMB1Rlc3RPcmcxEDAOBgNVBAsMB1Rlc3QgQ0EwHhcNMjEwMjA1
-MDA1NDUwWhcNNDEwMTMxMDA1NDUwWjAUMRIwEAYDVQQDDAlsb2NhbGhvc3QwggEi
-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSMe7vDHmJPbPkZEaS6glrhhS
-32jG3k+Prr0ikY3fmYLFkugfM/8LZ5W9Q03EMSxyvxKH8mo1lpM6VJqWhXmyL04K
-zCNQvihSF4pQDJwAB8/4BC0N8DB/s2hQyfTrMAa4z4BnJN2cF0hcAXrMJPpi+0GE
-YfTSNn0BaEZMgs7cmrMwB+1m9UL02pOrwVQE6C7ddCsNis+zHP7RZ+qsD7ruv3Rr
-eyzlOJJpPpB58lcIMslttUu9+yMHKZ3Zzheiw0GeMWYFthmVWij+Qazjf7MR7for
-DJrBHwEhuw/USBdCC3hSLnFKG630znA0+mhEt+p1j+HGNqjSG7IDJtEhieZtAgMB
-AAGjODA2MAkGA1UdEwQCMAAwFAYDVR0RBA0wC4IJbG9jYWxob3N0MBMGA1UdJQQM
-MAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4ICAQC9ZAS+Do5OFQjpMAzWRATv
-togcVhgwdSHJWYPzO+NyMX1Zsr3aFcuoFuYW5DduGb8dRzXC1IOof9J8rMbubqY0
-+wZhpZ4fuxd2n08izhpk+033W+385cCjloqYZXzo7L9vHJK4M5/n68RIdmFjIxD6
-uvJ0LrnBCEWL6VNjwiFoa7VxXLhAR797l5xEOXP2AVFA3lwnOxbKTgMU10VYk3XC
-raNZS4CByDsNJU67IeKz/4nlPjltttKJATfEsL6zmre4GWSidMVEv5y75fA5Hogp
-gKP+eXoAFNk69PXpULtvzpEqCzZbZfcWMFULczPv4RvGD/q18PDDJ7MCsflTrADf
-OMY16QGhcsb1tjZtk9JYU7CIYHKeljIEW1vmfA6xOjyXTavAR9XHQRNpXTpdd1C9
-GQJ8Y70jYoEE/J0GjEZEgufCOdqBEC1mQV68cfNiYV1LiyqZrC83YSuA0UdhvTEV
-O15LJQZcVK2ycpKu85FaVLhwlrJUgWuN1227VFS42ApSJSCLOIgNhN20wwJFx1Ax
-gkgoHV/70q0CtR0ZIDWvLwA/fXZQNboAurPR0/YMtn63PDYaGThnrnxSTaKfYBhm
-lGJaD3a4/wRoZtWYkVLKa8DO3k28P9WZn9gAidGvkHgmSLYa/TftPr6SnkP4QE8C
-fdyL8KJZCtk2TBQRU7U1FQ==
------END CERTIFICATE-----`
-
-const localhostKeyPem = `-----BEGIN PRIVATE KEY-----
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDjSMe7vDHmJPbP
-kZEaS6glrhhS32jG3k+Prr0ikY3fmYLFkugfM/8LZ5W9Q03EMSxyvxKH8mo1lpM6
-VJqWhXmyL04KzCNQvihSF4pQDJwAB8/4BC0N8DB/s2hQyfTrMAa4z4BnJN2cF0hc
-AXrMJPpi+0GEYfTSNn0BaEZMgs7cmrMwB+1m9UL02pOrwVQE6C7ddCsNis+zHP7R
-Z+qsD7ruv3RreyzlOJJpPpB58lcIMslttUu9+yMHKZ3Zzheiw0GeMWYFthmVWij+
-Qazjf7MR7forDJrBHwEhuw/USBdCC3hSLnFKG630znA0+mhEt+p1j+HGNqjSG7ID
-JtEhieZtAgMBAAECggEANPpF9DCNwQNktEVN+T8hVocaDFce6Rvwl6E3XNNoqnHx
-1XPEv2EzVckzUgZaHh0IK0b2XtHWh98tOi92SRebojj8i+/BW5S3eUsbZkVKJ4eq
-pjjy94jBBUMgUZSBjkCHkJRtbZ1eOoAC0c9WfDcyVdgTEXRzyHwC700K9dKXvTux
-gJAvI7KA9kCy86793tbooKUNFWIh4sVTA8Bg78/6XTrXSgOnn1u5433HX+j8eQBD
-azlA038hsJwMgDL5EYIL8lLp7PqnFzExQ+KToK3+MpRhqLUUs8dYRrxxWWJ86GTn
-NeVA+wLVmNN8CQYNdoiPNCRLzxycLUteGpEGyRkiUQKBgQD4ewiNqpX+GQbt+3g/
-0JvDLTUKMJt6T5VF9m1V/BjzDn27gBnWZ2AhmokXtHd2Lln0R98f4vIr/pNvsh5e
-i+/YEesqAUB7fGeyGP8fyWv4JmJ2LW9U3Q4gSHveX5brsr37aclFQwCCLgSF4Sps
-b035mZ7LRCGtbMhK67ZjEIgKOwKBgQDqKYpFmEfdAvJC4AwvypLy1cHQcwkWKUqf
-99A0SlOEsD2f5tb0K5tJEeG7k0QbEc60G+eINwFezivp+mF5VR1TWo4F2zlrqFOW
-hGZJvvOj2d88cqzvZ1D2EDO6pGwnjnfK4znR/2aBlbPHqaWk4bbMg+963ekWT66C
-z5gXSjAfdwKBgQC9BOrGyaN8PhGVa5xX/xreaD9W1w8PBgcpx4H4zOM10io3PgVp
-og3wwhvTmobdsfjf6OSE3yEV8ny5lSehCJaVKVxZAcbJqSNAyd8ZkSG/DYQNHhb4
-2Yfravg/ezvVZI08+YYQWB3E6birF1QsVKdeXkv7mIJ96KicxZ5i0aqLDQKBgQCm
-NwZnkEiyoTzGK7N62RimNwV0qbNxf63xDz9DXt8Z+OBFeN5sQ+feXksVktttO562
-Snh3QFRAr6iMVaaLMde3KzhU/+AqgzmSRjk1b84SKL1Fc0E+TuAxSh7uBXigO4jd
-A54valOg+Fq9B7cE6xOO6Lg9RvgFVlpRkHotTgQK0QKBgFHI5lMXMYydeAT59zb5
-mIFoFLOJ+JZ4nvoNu1uFQCVKH0bARK3t8oWL7ZCRtc8vANiFS8I/JTQVO1HhW3NE
-fjl8EwIhuijeojU23fzVlFdXjGGzXqHO5Bm0nDuRV6XirMF5+Lh6w+y8UYLketwc
-4ru0SF3ayA6bVHGXEeS5TOkv
------END PRIVATE KEY-----`
-
+import (
+	"github.com/Cloud-Foundations/keymaster/misc/testcerts"
+)
 
+var rootCAPem = testcerts.RootCertPem
+var localhostCertPem = testcerts.LocalHostCertPem
+var localhostKeyPem = testcerts.LocalHostKeyPem
diff --git a/lib/vip/testcerts_test.go b/lib/vip/testcerts_test.go
index a8bc6e4c..0258d4e0 100644
--- a/lib/vip/testcerts_test.go
+++ b/lib/vip/testcerts_test.go
@@ -1,86 +1,9 @@
 package vip
 
-const rootCAPem = `-----BEGIN CERTIFICATE-----
-MIIE1jCCAr4CAQowDQYJKoZIhvcNAQELBQAwMTELMAkGA1UEBhMCVVMxEDAOBgNV
-BAoMB1Rlc3RPcmcxEDAOBgNVBAsMB1Rlc3QgQ0EwHhcNMjEwMjA1MDA1NDUwWhcN
-NDEwMTMxMDA1NDUwWjAxMQswCQYDVQQGEwJVUzEQMA4GA1UECgwHVGVzdE9yZzEQ
-MA4GA1UECwwHVGVzdCBDQTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
-AMepGyjzJkXS3gCBStImA3I/OY6us1MqzqQGeRJIL/13n9PHqPfXIjadJ7z0krFB
-xXGT2WyVRhoc+tP1K8rfwRjNtMDjxtzphDLaUSvjhB5FvOhR0Ch6ByrFlP507FVa
-MeQo+8Bex9q0SaHXtGLM5hWuYQpG6dpOlXl6DKQwqYjptzL/RfMwJKukaoc0J5e+
-3xNR3XhC+ejMHp99rEORC4aLhfWhwfOhtIslIVI/HXKu72/lxIMpkhaoObBgqdQC
-3e5KMg+/liZ6y/HOhN49pKuNq1SfKy6tOpI4fwZnWvKviNx8E16P4JlqPdLPAULb
-aGZH7FaAwtd3bBeKXRTsasZLfEA/K2AOIucquehEH8Nkprjn6XlDbZf/1zfAqID/
-lk/QTo3uhyYjj4O3G8VSZ9PCQF/n918FDOY6DtnjmY3z0ZjAZv95sf8JBbFZVHSF
-ovmsWpWbRXmgorswY8yeL/jWCJ5Zp0SQhT2Bj2OmwjmNgDNnbp9BxjGHpmfJ/pxo
-lJ1vDfITYYOWWejBQE6A+fsk4CQ/0IwE4jNA9MI/03yXv8qoT2eEOTsovIYMpn/9
-0UjgufiiBfYHXXlAVsdHcHDfL3RxpJpFJC6M4xVLNQ0nF4gfOP4Ek2JhWEntCbTZ
-je9xcvebgb675DuaAOim0fkcbPz5VRMXuw6FjaX/x6j1AgMBAAEwDQYJKoZIhvcN
-AQELBQADggIBADng/A4RceeZKarKnqv3+TVBmxUrnbzUdwlrRwGFtEQZ1cVG53zP
-hlfnP/zyMsyG77utJbcaKaAqOrf0XHiiDNKe/ScfCd7K0pdoS52jhenvCD8E7hko
-9Ut4lCec4SFXTpeXaP0E39plmaUfB+gStZqCVxb+kOfV1C7Q7fYnUI9WzJojm2G4
-IsRIEIlYn2qW7NTWUdVVprHGZgEE18MxB8aDmJV0VW/WbiiJmlNDDjHYznk5q33T
-SDIRzQUEul6Zo9QUEJYy9kYHYZwhI6BRuxEJzqt2fFiGBpJ5YSwD11GDOu8SMumV
-J9WwfjRpMbVjRKw0l7vQA0PrnsXt4oYzzuRUv9IQovA6CGzopCModOddrY3B1me6
-e5hGdIexZUFQthu0LFpdp1fNJPoGCtKsRKXgaqTDkt0Di4lOwwzZ0CrvEqZNKvjU
-keeeyuornLpaC218Qtz1AHWGLKqCfyZ0VuuNe7lrH/nGkWFzE91zr8bxiQJNGDOl
-V1RUB/s4hQwCRVgiYUdKsTsD01BBcsPVBFR20Xawij5LlsFi3Dx4fIYq/Y+aa9KV
-EXQO2FLxSHa0+BeKbQYjlyTcLAz0Q1qiHnUBU2Id7UQuAM25z1F4a6roHKiADxA5
-AZ07E2gWGFQWsuEwC1+IUrv3QZH2Z9fNgg3M4OLTfqPr4uZNkqwQ9FN2
------END CERTIFICATE-----`
-
-const localhostCertPem = `-----BEGIN CERTIFICATE-----
-MIID/DCCAeSgAwIBAgIFAt3gJswwDQYJKoZIhvcNAQELBQAwMTELMAkGA1UEBhMC
-VVMxEDAOBgNVBAoMB1Rlc3RPcmcxEDAOBgNVBAsMB1Rlc3QgQ0EwHhcNMjEwMjA1
-MDA1NDUwWhcNNDEwMTMxMDA1NDUwWjAUMRIwEAYDVQQDDAlsb2NhbGhvc3QwggEi
-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSMe7vDHmJPbPkZEaS6glrhhS
-32jG3k+Prr0ikY3fmYLFkugfM/8LZ5W9Q03EMSxyvxKH8mo1lpM6VJqWhXmyL04K
-zCNQvihSF4pQDJwAB8/4BC0N8DB/s2hQyfTrMAa4z4BnJN2cF0hcAXrMJPpi+0GE
-YfTSNn0BaEZMgs7cmrMwB+1m9UL02pOrwVQE6C7ddCsNis+zHP7RZ+qsD7ruv3Rr
-eyzlOJJpPpB58lcIMslttUu9+yMHKZ3Zzheiw0GeMWYFthmVWij+Qazjf7MR7for
-DJrBHwEhuw/USBdCC3hSLnFKG630znA0+mhEt+p1j+HGNqjSG7IDJtEhieZtAgMB
-AAGjODA2MAkGA1UdEwQCMAAwFAYDVR0RBA0wC4IJbG9jYWxob3N0MBMGA1UdJQQM
-MAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4ICAQC9ZAS+Do5OFQjpMAzWRATv
-togcVhgwdSHJWYPzO+NyMX1Zsr3aFcuoFuYW5DduGb8dRzXC1IOof9J8rMbubqY0
-+wZhpZ4fuxd2n08izhpk+033W+385cCjloqYZXzo7L9vHJK4M5/n68RIdmFjIxD6
-uvJ0LrnBCEWL6VNjwiFoa7VxXLhAR797l5xEOXP2AVFA3lwnOxbKTgMU10VYk3XC
-raNZS4CByDsNJU67IeKz/4nlPjltttKJATfEsL6zmre4GWSidMVEv5y75fA5Hogp
-gKP+eXoAFNk69PXpULtvzpEqCzZbZfcWMFULczPv4RvGD/q18PDDJ7MCsflTrADf
-OMY16QGhcsb1tjZtk9JYU7CIYHKeljIEW1vmfA6xOjyXTavAR9XHQRNpXTpdd1C9
-GQJ8Y70jYoEE/J0GjEZEgufCOdqBEC1mQV68cfNiYV1LiyqZrC83YSuA0UdhvTEV
-O15LJQZcVK2ycpKu85FaVLhwlrJUgWuN1227VFS42ApSJSCLOIgNhN20wwJFx1Ax
-gkgoHV/70q0CtR0ZIDWvLwA/fXZQNboAurPR0/YMtn63PDYaGThnrnxSTaKfYBhm
-lGJaD3a4/wRoZtWYkVLKa8DO3k28P9WZn9gAidGvkHgmSLYa/TftPr6SnkP4QE8C
-fdyL8KJZCtk2TBQRU7U1FQ==
------END CERTIFICATE-----`
-
-const localhostKeyPem = `-----BEGIN PRIVATE KEY-----
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDjSMe7vDHmJPbP
-kZEaS6glrhhS32jG3k+Prr0ikY3fmYLFkugfM/8LZ5W9Q03EMSxyvxKH8mo1lpM6
-VJqWhXmyL04KzCNQvihSF4pQDJwAB8/4BC0N8DB/s2hQyfTrMAa4z4BnJN2cF0hc
-AXrMJPpi+0GEYfTSNn0BaEZMgs7cmrMwB+1m9UL02pOrwVQE6C7ddCsNis+zHP7R
-Z+qsD7ruv3RreyzlOJJpPpB58lcIMslttUu9+yMHKZ3Zzheiw0GeMWYFthmVWij+
-Qazjf7MR7forDJrBHwEhuw/USBdCC3hSLnFKG630znA0+mhEt+p1j+HGNqjSG7ID
-JtEhieZtAgMBAAECggEANPpF9DCNwQNktEVN+T8hVocaDFce6Rvwl6E3XNNoqnHx
-1XPEv2EzVckzUgZaHh0IK0b2XtHWh98tOi92SRebojj8i+/BW5S3eUsbZkVKJ4eq
-pjjy94jBBUMgUZSBjkCHkJRtbZ1eOoAC0c9WfDcyVdgTEXRzyHwC700K9dKXvTux
-gJAvI7KA9kCy86793tbooKUNFWIh4sVTA8Bg78/6XTrXSgOnn1u5433HX+j8eQBD
-azlA038hsJwMgDL5EYIL8lLp7PqnFzExQ+KToK3+MpRhqLUUs8dYRrxxWWJ86GTn
-NeVA+wLVmNN8CQYNdoiPNCRLzxycLUteGpEGyRkiUQKBgQD4ewiNqpX+GQbt+3g/
-0JvDLTUKMJt6T5VF9m1V/BjzDn27gBnWZ2AhmokXtHd2Lln0R98f4vIr/pNvsh5e
-i+/YEesqAUB7fGeyGP8fyWv4JmJ2LW9U3Q4gSHveX5brsr37aclFQwCCLgSF4Sps
-b035mZ7LRCGtbMhK67ZjEIgKOwKBgQDqKYpFmEfdAvJC4AwvypLy1cHQcwkWKUqf
-99A0SlOEsD2f5tb0K5tJEeG7k0QbEc60G+eINwFezivp+mF5VR1TWo4F2zlrqFOW
-hGZJvvOj2d88cqzvZ1D2EDO6pGwnjnfK4znR/2aBlbPHqaWk4bbMg+963ekWT66C
-z5gXSjAfdwKBgQC9BOrGyaN8PhGVa5xX/xreaD9W1w8PBgcpx4H4zOM10io3PgVp
-og3wwhvTmobdsfjf6OSE3yEV8ny5lSehCJaVKVxZAcbJqSNAyd8ZkSG/DYQNHhb4
-2Yfravg/ezvVZI08+YYQWB3E6birF1QsVKdeXkv7mIJ96KicxZ5i0aqLDQKBgQCm
-NwZnkEiyoTzGK7N62RimNwV0qbNxf63xDz9DXt8Z+OBFeN5sQ+feXksVktttO562
-Snh3QFRAr6iMVaaLMde3KzhU/+AqgzmSRjk1b84SKL1Fc0E+TuAxSh7uBXigO4jd
-A54valOg+Fq9B7cE6xOO6Lg9RvgFVlpRkHotTgQK0QKBgFHI5lMXMYydeAT59zb5
-mIFoFLOJ+JZ4nvoNu1uFQCVKH0bARK3t8oWL7ZCRtc8vANiFS8I/JTQVO1HhW3NE
-fjl8EwIhuijeojU23fzVlFdXjGGzXqHO5Bm0nDuRV6XirMF5+Lh6w+y8UYLketwc
-4ru0SF3ayA6bVHGXEeS5TOkv
------END PRIVATE KEY-----`
-
+import (
+	"github.com/Cloud-Foundations/keymaster/misc/testcerts"
+)
 
+var rootCAPem = testcerts.RootCertPem
+var localhostCertPem = testcerts.LocalHostCertPem
+var localhostKeyPem = testcerts.LocalHostKeyPem
diff --git a/makefile.certs b/makefile.certs
index 65cf581b..c97baad9 100644
--- a/makefile.certs
+++ b/makefile.certs
@@ -1,26 +1,24 @@
 #this is macos/linux makefile to build the test keys
 
 
-all: cmd/keymaster/testcerts_test.go cmd/keymasterd/testcerts_test.go lib/vip/testcerts_test.go lib/authutil/testcerts_test.go lib/pwauth/ldap/testcerts_test.go lib/client/twofa/testcerts_test.go
+define DEFAULTEXT
+authorityKeyIdentifier=keyid,issuer
+basicConstraints=CA:FALSE
+keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
+extendedKeyUsage = serverAuth, clientAuth
+subjectAltName =DNS:localhost
+endef
+export DEFAULTEXT
+
+define CAEXT
+authorityKeyIdentifier=keyid,issuer
+basicConstraints=CA:TRUE
+keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyCertSign
+endef
+export CAEXT
+
+all: misc/testcerts/localhost.pem
 	
-lib/client/twofa/testcerts_test.go:
-	echo "package twofa\n\nconst rootCAPem = \``cat misc/testcerts/root.pem`\`\n\nconst localhostCertPem = \``cat misc/testcerts/localhost.pem`\`\n\nconst localhostKeyPem = \``cat misc/testcerts/eekey.pem`\`\n\n" > lib/client/twofa/testcerts_test.go
-
-lib/pwauth/ldap/testcerts_test.go:
-	echo "package ldap\n\nconst rootCAPem = \``cat misc/testcerts/root.pem`\`\n\nconst localhostCertPem = \``cat misc/testcerts/localhost.pem`\`\n\nconst localhostKeyPem = \``cat misc/testcerts/eekey.pem`\`\n\n" > lib/pwauth/ldap/testcerts_test.go
-
-lib/authutil/testcerts_test.go:
-	echo "package authutil\n\nconst rootCAPem = \``cat misc/testcerts/root.pem`\`\n\nconst localhostCertPem = \``cat misc/testcerts/localhost.pem`\`\n\nconst localhostKeyPem = \``cat misc/testcerts/eekey.pem`\`\n\n" > lib/authutil/testcerts_test.go
-
-lib/vip/testcerts_test.go:
-	echo "package vip\n\nconst rootCAPem = \``cat misc/testcerts/root.pem`\`\n\nconst localhostCertPem = \``cat misc/testcerts/localhost.pem`\`\n\nconst localhostKeyPem = \``cat misc/testcerts/eekey.pem`\`\n\n" > lib/vip/testcerts_test.go
-
-cmd/keymasterd/testcerts_test.go: misc/testcerts/localhost.pem misc/testcerts/root.pem misc/testcerts/eekey.pem
-	echo "package main\n\nconst rootCAPem = \``cat misc/testcerts/root.pem`\`\n\nconst localhostCertPem = \``cat misc/testcerts/localhost.pem`\`\n\nconst localhostKeyPem = \``cat misc/testcerts/eekey.pem`\`\n\n" > cmd/keymasterd/testcerts_test.go
-
-
-cmd/keymaster/testcerts_test.go: misc/testcerts/localhost.pem misc/testcerts/root.pem misc/testcerts/eekey.pem
-	echo "package main\n\nconst rootCAPem = \``cat misc/testcerts/root.pem`\`\n\nconst localhostCertPem = \``cat misc/testcerts/localhost.pem`\`\n\nconst localhostKeyPem = \``cat misc/testcerts/eekey.pem`\`\n\n" > cmd/keymaster/testcerts_test.go
 
 misc/testcerts/localhost.pem: misc/testcerts/localhost.csr misc/testcerts/localhost.ext misc/testcerts/root.pem
 	openssl  x509 -req -sha256 -days 730 -CAkey misc/testcerts/rootkey.pem -CA misc/testcerts/root.pem -set_serial 12312389324 -out misc/testcerts/localhost.pem -in misc/testcerts/localhost.csr  -extfile misc/testcerts/localhost.ext
@@ -30,19 +28,19 @@ misc/testcerts/localhost.csr: misc/testcerts/eekey.pem
 	openssl req -new -key misc/testcerts/eekey.pem -batch -out misc/testcerts/localhost.csr -utf8 -subj '/CN=localhost'
 
 misc/testcerts/localhost.ext:
-	echo "basicConstraints = CA:FALSE\nsubjectAltName =DNS:localhost\nextendedKeyUsage =serverAuth\n" > misc/testcerts/localhost.ext
+	echo "$$DEFAULTEXT" >> $@
 
 misc/testcerts/eekey.pem:
 	openssl genpkey -algorithm RSA -out misc/testcerts/eekey.pem -pkeyopt rsa_keygen_bits:2048
 
-misc/testcerts/root.pem: misc/testcerts/root.csr misc/testcerts/rootkey.pem   
-	openssl x509 -req -sha256 -days 7300 -in misc/testcerts/root.csr -signkey misc/testcerts/rootkey.pem -set_serial 10  -out misc/testcerts/root.pem
+misc/testcerts/root.pem: misc/testcerts/root.csr misc/testcerts/rootkey.pem   misc/testcerts/root.ext
+	openssl x509 -req -sha256 -days 7300 -in misc/testcerts/root.csr -signkey misc/testcerts/rootkey.pem -set_serial 10  -out misc/testcerts/root.pem -extfile misc/testcerts/root.ext
 
 misc/testcerts/root.csr: misc/testcerts/rootkey.pem
 	openssl req -new -key misc/testcerts/rootkey.pem  -out misc/testcerts/root.csr -utf8 -subj '/C=US/O=TestOrg/OU=Test CA'
 
 misc/testcerts/root.ext:
-	echo "basicConstraints = CA:TRUE\n" > misc/testcerts/root.ext
+	echo "$$CAEXT" > $@
 
 misc/testcerts/rootkey.pem:
 	openssl genpkey -algorithm RSA -out misc/testcerts/rootkey.pem -pkeyopt rsa_keygen_bits:4096
diff --git a/misc/testcerts/testCerts.go b/misc/testcerts/testCerts.go
new file mode 100644
index 00000000..ed78e252
--- /dev/null
+++ b/misc/testcerts/testCerts.go
@@ -0,0 +1,20 @@
+package testcerts
+
+import (
+	_ "embed"
+)
+
+// Files:
+// eekey.pem	localhost.csr	localhost.ext	localhost.pem	root.csr	root.pem	rootkey.pem	testCerts.go
+
+//go:embed root.pem
+var RootCertPem string
+
+//go:embed rootkey.pem
+var RootKeyPem string
+
+//go:embed localhost.pem
+var LocalHostCertPem string
+
+//go:embed eekey.pem
+var LocalHostKeyPem string