1[Created by: generate-chains.py]
2
3Certificate chain where the intermediate's Basic Constraints extension is
4not marked as critical.
5
6Certificate:
7    Data:
8        Version: 3 (0x2)
9        Serial Number:
10            4a:45:83:31:ef:c5:47:03:ae:f7:5a:80:bf:fb:8c:bc:23:1e:dc:c4
11        Signature Algorithm: sha256WithRSAEncryption
12        Issuer: CN=Intermediate
13        Validity
14            Not Before: Oct  5 12:00:00 2021 GMT
15            Not After : Oct  5 12:00:00 2022 GMT
16        Subject: CN=Target
17        Subject Public Key Info:
18            Public Key Algorithm: rsaEncryption
19                RSA Public-Key: (2048 bit)
20                Modulus:
21                    00:d8:cc:f6:ec:23:eb:20:d2:0e:7e:29:04:ec:8c:
22                    b9:bd:ee:47:6e:0b:ac:a9:fa:22:a4:fc:41:74:04:
23                    d0:b5:8a:37:56:29:d5:be:e7:e0:45:88:30:d9:5a:
24                    e0:a7:69:fd:d1:c3:4d:1c:42:68:ae:7d:cf:54:db:
25                    84:b9:91:e6:68:c5:d1:6d:a4:34:4a:7f:8f:3e:a3:
26                    a8:c4:0e:3f:90:42:a9:b8:84:c2:fd:51:ed:eb:e9:
27                    6d:cc:5a:22:f7:fb:eb:29:7d:5d:97:9d:26:eb:10:
28                    29:bf:2a:bd:b0:2f:33:9b:e7:a3:17:9b:db:b4:ce:
29                    f8:5e:66:25:7c:8c:e3:c8:53:cf:c2:c3:80:cf:e6:
30                    68:98:ca:bd:e3:b8:d3:bc:e2:03:d0:31:5b:ef:21:
31                    6d:2d:42:5e:cb:9a:3a:4d:7a:bd:e7:75:75:ff:63:
32                    95:aa:08:20:fb:a8:6f:95:a9:ea:45:07:c4:a7:32:
33                    89:58:94:98:76:2f:5d:d4:85:90:e3:be:96:33:1c:
34                    53:d7:bd:58:87:75:4e:8c:c9:c9:6b:c8:b6:3f:d3:
35                    46:1a:9f:4c:de:a5:48:cd:ad:87:fe:7a:82:f2:0c:
36                    65:84:f5:09:ce:cf:fd:6c:66:57:91:dc:fb:85:d1:
37                    ff:b2:4c:ce:2f:a3:73:b1:dc:1e:13:5c:03:1a:a6:
38                    99:13
39                Exponent: 65537 (0x10001)
40        X509v3 extensions:
41            X509v3 Subject Key Identifier:
42                FD:20:6C:45:13:AE:E6:1F:25:FD:C9:1E:E3:09:32:CC:34:28:4E:CF
43            X509v3 Authority Key Identifier:
44                keyid:5A:44:77:BA:2D:5E:48:FE:11:68:59:58:40:91:67:E2:22:BF:31:38
45
46            Authority Information Access:
47                CA Issuers - URI:http://url-for-aia/Intermediate.cer
48
49            X509v3 CRL Distribution Points:
50
51                Full Name:
52                  URI:http://url-for-crl/Intermediate.crl
53
54            X509v3 Key Usage: critical
55                Digital Signature, Key Encipherment
56            X509v3 Extended Key Usage:
57                TLS Web Server Authentication, TLS Web Client Authentication
58    Signature Algorithm: sha256WithRSAEncryption
59         da:44:ec:6a:27:0f:44:9c:43:dd:cd:b9:a1:e9:a6:fd:10:d9:
60         2e:b6:70:7d:27:f3:af:2e:14:36:ba:13:0b:65:1d:69:c6:17:
61         28:bc:8f:0f:bb:b6:ca:f7:77:9a:ac:d6:2f:60:4b:51:2d:0f:
62         28:9e:3f:7c:0f:03:40:d4:bf:80:78:3c:55:fa:ef:94:e2:db:
63         2c:9c:47:a2:ea:6d:da:60:40:2c:38:e0:c4:41:a4:9d:5a:9d:
64         15:3e:04:36:e1:ac:6f:cd:b2:af:af:b0:79:e9:ee:37:78:00:
65         ad:22:ae:fb:9e:79:be:41:0a:26:d8:ed:4d:8e:3f:5e:66:fd:
66         66:e5:9b:4d:02:87:00:d6:9a:5d:29:c9:6c:db:56:4f:f4:69:
67         cf:08:ad:4f:64:0e:ec:73:7a:54:90:17:cc:6e:29:6c:a3:0c:
68         db:cb:54:4d:e1:fc:3d:7c:82:38:18:40:5c:b3:cb:10:dd:b9:
69         e4:3f:2b:19:0f:a2:bb:f0:d6:bc:bc:30:03:96:c7:0c:73:f5:
70         b0:53:b3:5c:8c:8e:c0:d5:05:05:39:a6:62:52:9a:c1:8d:74:
71         29:6a:93:ef:29:53:52:63:14:fc:f9:b9:1b:34:dc:7f:4f:ba:
72         30:c9:4f:5e:61:73:f2:df:c3:ae:51:37:26:ee:8e:4b:91:16:
73         d5:c2:a5:ce
74-----BEGIN CERTIFICATE-----
75MIIDoDCCAoigAwIBAgIUSkWDMe/FRwOu91qAv/uMvCMe3MQwDQYJKoZIhvcNAQEL
76BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTIxMTAwNTEyMDAwMFoXDTIy
77MTAwNTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF
78AAOCAQ8AMIIBCgKCAQEA2Mz27CPrINIOfikE7Iy5ve5HbgusqfoipPxBdATQtYo3
79VinVvufgRYgw2Vrgp2n90cNNHEJorn3PVNuEuZHmaMXRbaQ0Sn+PPqOoxA4/kEKp
80uITC/VHt6+ltzFoi9/vrKX1dl50m6xApvyq9sC8zm+ejF5vbtM74XmYlfIzjyFPP
81wsOAz+ZomMq947jTvOID0DFb7yFtLUJey5o6TXq953V1/2OVqggg+6hvlanqRQfE
82pzKJWJSYdi9d1IWQ476WMxxT171Yh3VOjMnJa8i2P9NGGp9M3qVIza2H/nqC8gxl
83hPUJzs/9bGZXkdz7hdH/skzOL6NzsdweE1wDGqaZEwIDAQABo4HpMIHmMB0GA1Ud
84DgQWBBT9IGxFE67mHyX9yR7jCTLMNChOzzAfBgNVHSMEGDAWgBRaRHe6LV5I/hFo
85WVhAkWfiIr8xODA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91
86cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0
87dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIF
88oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD
89ggEBANpE7GonD0ScQ93NuaHppv0Q2S62cH0n868uFDa6EwtlHWnGFyi8jw+7tsr3
90d5qs1i9gS1EtDyieP3wPA0DUv4B4PFX675Ti2yycR6LqbdpgQCw44MRBpJ1anRU+
91BDbhrG/Nsq+vsHnp7jd4AK0irvueeb5BCibY7U2OP15m/Wblm00ChwDWml0pyWzb
92Vk/0ac8IrU9kDuxzelSQF8xuKWyjDNvLVE3h/D18gjgYQFyzyxDdueQ/KxkPorvw
931ry8MAOWxwxz9bBTs1yMjsDVBQU5pmJSmsGNdClqk+8pU1JjFPz5uRs03H9PujDJ
94T15hc/Lfw65RNybujkuRFtXCpc4=
95-----END CERTIFICATE-----
96
97Certificate:
98    Data:
99        Version: 3 (0x2)
100        Serial Number:
101            2d:b0:5d:cd:6e:fd:4d:77:89:ef:99:fc:fd:05:d3:22:44:3f:93:ef
102        Signature Algorithm: sha256WithRSAEncryption
103        Issuer: CN=Root
104        Validity
105            Not Before: Oct  5 12:00:00 2021 GMT
106            Not After : Oct  5 12:00:00 2022 GMT
107        Subject: CN=Intermediate
108        Subject Public Key Info:
109            Public Key Algorithm: rsaEncryption
110                RSA Public-Key: (2048 bit)
111                Modulus:
112                    00:fb:af:dd:12:ab:aa:06:e0:72:bd:43:4c:3e:5b:
113                    cd:02:9c:ca:c1:42:6d:cd:47:6e:6c:4c:6b:3f:2e:
114                    c1:3f:2e:88:3d:77:4f:1c:34:60:ba:f7:fb:58:64:
115                    3c:c2:76:5d:30:88:48:22:81:2f:27:c8:1f:b4:ed:
116                    96:07:5d:f7:7c:4a:37:be:fe:4f:7b:1f:19:82:21:
117                    24:18:c9:ae:a7:a5:58:62:9d:6b:f9:9a:88:56:0f:
118                    7f:b4:0c:1a:d5:4f:ab:2c:c4:97:6e:ec:db:b1:a0:
119                    43:86:34:08:2e:21:16:f8:f6:3e:2a:e8:ca:9a:a4:
120                    fb:91:7e:f9:43:19:42:08:10:7e:92:af:60:45:4e:
121                    30:e4:d3:d3:e9:bf:32:cf:c1:1b:a0:52:6e:a4:aa:
122                    ed:13:6d:e8:7f:68:c6:88:84:67:20:8f:6b:82:9c:
123                    49:5d:b4:95:63:9d:0a:dc:9f:ab:7b:b3:eb:f7:ad:
124                    48:35:f5:44:ec:84:23:e1:5b:ca:49:16:e0:c2:5a:
125                    8f:3e:d2:2b:fa:50:08:bf:12:3b:da:8c:96:66:93:
126                    69:5b:27:4e:b8:e7:8d:11:14:e6:29:23:b5:d9:f7:
127                    b0:f9:e2:90:e2:d8:be:8d:1d:dc:89:f5:eb:15:df:
128                    58:88:e8:91:14:94:9d:37:e3:10:1a:de:30:3c:18:
129                    d7:6f
130                Exponent: 65537 (0x10001)
131        X509v3 extensions:
132            X509v3 Subject Key Identifier:
133                5A:44:77:BA:2D:5E:48:FE:11:68:59:58:40:91:67:E2:22:BF:31:38
134            X509v3 Authority Key Identifier:
135                keyid:B8:16:92:87:E1:0C:B9:E5:61:C3:DA:A5:05:11:6A:58:DD:78:65:8E
136
137            Authority Information Access:
138                CA Issuers - URI:http://url-for-aia/Root.cer
139
140            X509v3 CRL Distribution Points:
141
142                Full Name:
143                  URI:http://url-for-crl/Root.crl
144
145            X509v3 Key Usage: critical
146                Certificate Sign, CRL Sign
147            X509v3 Basic Constraints:
148                CA:TRUE
149    Signature Algorithm: sha256WithRSAEncryption
150         3c:1a:07:71:b2:e0:cd:a3:3f:a4:a3:32:26:a8:6b:f8:72:83:
151         0c:f1:e9:88:03:59:53:33:1f:b3:9b:cd:93:c9:ed:e3:ca:a2:
152         ef:43:ac:87:8c:7f:9a:06:6b:85:41:a2:c3:25:6a:82:12:39:
153         8c:57:22:37:86:6e:08:28:86:aa:ea:60:21:95:b5:ec:d5:2e:
154         39:90:89:e1:76:5d:71:e0:3f:42:92:5e:17:2e:09:88:48:b3:
155         e3:83:e5:b6:ec:67:e0:03:1d:11:4a:df:4f:6e:f5:18:8b:7f:
156         79:8c:89:69:59:45:9b:f7:f6:f3:ea:83:fe:05:49:bb:13:64:
157         d4:28:0c:78:83:1d:f6:17:86:16:5a:f7:81:06:11:ce:ef:35:
158         8d:79:7d:f1:d1:ff:a7:a9:b3:1a:f4:a3:20:b0:0f:d0:d3:5b:
159         1c:f6:1d:73:3d:96:8c:e6:19:70:a4:55:a5:ad:a8:f0:93:46:
160         f4:40:41:b2:3c:b3:78:1b:eb:74:29:6c:3f:7e:7f:f5:b0:c0:
161         e3:60:e1:8e:cc:a7:70:00:3d:de:66:f6:ee:e5:17:61:1f:c4:
162         d0:1c:f7:1c:19:5d:cd:e8:a6:45:14:d4:f0:78:87:7f:30:0f:
163         91:f8:8e:4c:d8:37:cf:c7:c1:08:c4:76:0f:7d:b9:48:06:89:
164         6a:05:b1:4d
165-----BEGIN CERTIFICATE-----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185-----END CERTIFICATE-----
186
187Certificate:
188    Data:
189        Version: 3 (0x2)
190        Serial Number:
191            2d:b0:5d:cd:6e:fd:4d:77:89:ef:99:fc:fd:05:d3:22:44:3f:93:ee
192        Signature Algorithm: sha256WithRSAEncryption
193        Issuer: CN=Root
194        Validity
195            Not Before: Oct  5 12:00:00 2021 GMT
196            Not After : Oct  5 12:00:00 2022 GMT
197        Subject: CN=Root
198        Subject Public Key Info:
199            Public Key Algorithm: rsaEncryption
200                RSA Public-Key: (2048 bit)
201                Modulus:
202                    00:aa:94:1d:65:8c:79:04:f0:c9:d1:3c:23:76:e9:
203                    3e:2c:c9:52:e1:fc:b9:bf:35:8d:66:e4:37:66:b5:
204                    4b:ff:1a:9b:cb:30:e1:d4:30:54:fb:6e:f2:43:fd:
205                    76:b8:84:51:79:12:5a:65:95:87:ec:3d:19:b0:ab:
206                    04:94:64:aa:bc:e5:bf:e2:77:fd:07:28:3c:b5:20:
207                    da:55:2c:79:04:f2:71:6e:31:b4:63:14:80:4e:c3:
208                    83:1e:ea:7e:5a:c0:4d:48:4a:2e:9e:52:80:80:98:
209                    22:10:4a:05:d7:db:13:8f:37:67:20:63:19:01:92:
210                    07:46:94:b5:c9:ba:e7:68:af:06:57:35:69:50:50:
211                    22:23:0b:92:a1:98:32:08:88:5c:8b:4c:7c:a5:6a:
212                    f3:31:ee:bf:4c:59:b0:a1:cb:e8:28:1d:fa:4c:d3:
213                    1b:e6:2b:03:1a:4f:b5:8d:93:5d:18:95:c7:93:c1:
214                    8b:6f:55:17:34:17:e9:d8:70:47:c8:4c:b2:5a:fa:
215                    a7:aa:66:b7:a3:62:17:0a:7c:27:15:ef:c2:bc:5b:
216                    7a:7d:88:c7:2a:45:0c:d7:3b:91:7e:72:c6:30:cb:
217                    12:39:1e:a2:8a:88:39:30:f0:54:b4:19:6f:b6:5e:
218                    e8:01:60:2c:2b:27:cb:e5:93:49:ab:b8:9e:f0:29:
219                    e6:c7
220                Exponent: 65537 (0x10001)
221        X509v3 extensions:
222            X509v3 Subject Key Identifier:
223                B8:16:92:87:E1:0C:B9:E5:61:C3:DA:A5:05:11:6A:58:DD:78:65:8E
224            X509v3 Authority Key Identifier:
225                keyid:B8:16:92:87:E1:0C:B9:E5:61:C3:DA:A5:05:11:6A:58:DD:78:65:8E
226
227            Authority Information Access:
228                CA Issuers - URI:http://url-for-aia/Root.cer
229
230            X509v3 CRL Distribution Points:
231
232                Full Name:
233                  URI:http://url-for-crl/Root.crl
234
235            X509v3 Key Usage: critical
236                Certificate Sign, CRL Sign
237            X509v3 Basic Constraints: critical
238                CA:TRUE
239    Signature Algorithm: sha256WithRSAEncryption
240         86:e3:13:ea:c4:23:12:a4:15:aa:2d:23:f7:2a:4f:97:f4:57:
241         05:f5:d5:a8:aa:a1:dd:ad:a6:c2:6a:f4:d8:2d:f4:5c:2d:7a:
242         d4:6f:9c:ea:a9:09:e3:62:86:1f:aa:59:fe:d8:6b:35:0a:a1:
243         c4:87:8b:4d:b4:30:1f:9d:10:35:d8:94:82:bf:b4:42:dc:1d:
244         94:af:01:45:40:6e:02:e6:fa:b5:78:f5:ed:97:23:4c:95:cc:
245         89:33:69:83:59:04:fd:fa:48:5f:63:7d:08:9d:f1:26:a2:c1:
246         71:74:68:00:13:1c:d4:70:45:52:f5:a2:57:5b:34:1d:6b:e9:
247         fe:8c:46:84:2a:99:2a:3a:58:31:d9:be:35:5e:c8:97:34:f3:
248         6d:c3:d3:23:30:e2:fc:35:1f:82:68:02:ad:df:85:7b:4b:63:
249         96:b1:fc:1f:3c:68:04:63:1d:bf:ab:e5:9e:1a:8c:4f:d1:d5:
250         44:70:b4:4f:2b:30:a6:39:1c:4a:5e:4f:05:64:0d:83:3d:1d:
251         3b:17:b3:0b:b7:f4:ee:f5:44:47:36:92:aa:dd:30:74:68:0f:
252         07:da:14:c2:b3:b0:80:2a:0c:36:c0:a2:a6:77:f1:0c:e0:e2:
253         80:5e:2d:98:f1:af:b0:24:81:4f:d3:1e:df:46:95:fe:5e:8b:
254         44:84:a8:e0
255-----BEGIN CERTIFICATE-----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275-----END CERTIFICATE-----
276