CA

• Split large java classes
• Changed max. validity of CAB EE cert: 825 -> 397
• Simplified the SQL queries
• Added expiredCertsOnCrl extesion if expired certificates in contained in CRL
• Do not remove revoked but expired certs
• Bump bouncycastle from 1.66 to 1.68

OCSP

• Split large java classes
• Simplified the SQL queries
• Bump bouncycastle from 1.66 to 1.68

CLI

• Split large java classes
• Bump bouncycastle from 1.66 to 1.68

DB Tool

• Split large java classes

PKCS#11 Proxy

• Split large java classes

SHA256 Checksum

• f86140af150539530d810c9a9e7634b1779b1b4ebbbcab30261347f8d7ea4e81 ca-war-5.3.11.zip
• b8bfee26d5040b4bbfb558e45573e3f76ac1269482b89134226b6b0384b49992 dbtool-5.3.11.zip
• 56102396c9cb56de7a962fd3eca29df194dd068a8b8145a5dde6cbb257ba6458 ocsp-war-5.3.11.zip
• cd19d08b64371bf03f3aaf1178e295910410091de27a4fadd2c966fda88c4f34 p11proxy-war-5.3.11.zip
• 681daf5044f1740940d19431ca07df0886d2c03679009601c901b0dae5710ff9 xipki-cli-5.3.11.tar.gz