[Created by: generate-chains.py]

Certificate chain where the leaf certificate lacks an extended key usage
extension.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:73:f7:58:6c:9c:cb:aa:d7:aa:99:67:42:a3:18:c8:ae:3e:20:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:a5:77:70:28:bc:8f:18:ce:a2:39:65:81:
                    18:d9:31:0a:ee:23:09:81:cd:82:36:98:a5:82:2e:
                    b1:fc:59:a8:46:49:06:16:60:eb:12:46:2c:85:a8:
                    c0:75:7b:2d:45:0f:09:ba:d6:a9:fd:88:0f:d6:97:
                    78:1e:5d:51:cc:1a:94:1e:2e:b8:82:4e:e3:0c:aa:
                    58:1b:c6:dd:fd:d2:a3:92:6c:0a:ae:5e:ca:56:87:
                    9a:6c:bd:89:32:99:5b:da:33:dd:7a:ed:a7:c5:e1:
                    02:de:25:5b:17:6a:f5:15:8a:31:71:c7:c0:24:7c:
                    55:c4:8e:cf:4c:03:fd:7f:f4:e1:90:cc:1a:5e:b5:
                    f1:4b:2e:7a:2f:69:06:2a:86:76:33:88:ef:b2:e0:
                    84:52:98:03:eb:98:7b:16:25:65:6a:a6:5a:fa:37:
                    b5:a1:70:74:5e:96:87:62:78:a4:d4:05:60:97:3a:
                    f9:4c:86:49:0d:54:db:79:8d:68:56:58:83:ee:8f:
                    1a:da:d7:3a:06:78:6e:75:f0:a9:99:3a:22:a3:06:
                    ee:58:a2:2b:d1:ea:4a:a7:8a:c8:bd:43:f8:b1:70:
                    4f:fb:51:b6:22:78:cf:5c:c6:dc:80:33:3d:f5:92:
                    6d:91:c9:1b:7e:87:37:28:76:b4:ff:7f:6d:52:9b:
                    c7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                49:EA:B2:99:05:EC:D6:35:F4:11:A5:DD:F1:99:31:AE:C0:D8:B8:08
            X509v3 Authority Key Identifier: 
                keyid:7C:05:F1:0D:0B:C4:F8:8E:33:4C:F1:AE:78:6A:2C:16:AD:79:D0:A6

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
    Signature Algorithm: sha256WithRSAEncryption
         11:fb:c4:06:ee:ad:00:ab:81:d2:40:81:7e:1f:b1:ac:d1:83:
         53:00:8c:2e:e6:45:ce:35:85:c3:f9:65:ad:79:1a:39:54:7f:
         4b:a3:0a:b7:2b:a0:57:a8:c8:8f:18:a6:9b:2e:34:45:63:43:
         21:6c:dc:4d:fd:9c:50:7b:9e:c1:2a:9f:73:ec:f3:c6:e8:fd:
         83:34:64:ad:4d:e2:61:5c:7b:6b:b5:03:e6:fe:60:d1:f6:2e:
         35:71:fb:44:33:e3:64:15:fe:d0:c9:43:ed:59:ac:f6:33:88:
         1c:58:be:98:c7:ba:c2:4c:7a:19:13:c3:34:c9:5a:e0:02:c6:
         83:b9:e2:93:65:75:43:e3:c3:f3:71:ff:87:5e:bb:38:35:26:
         bc:6f:40:8e:ac:30:08:70:73:48:ea:88:32:c7:53:13:f5:00:
         f0:6e:50:df:48:ad:b9:5e:c5:4c:04:40:15:1f:bf:92:89:7a:
         7d:50:3d:27:d4:6a:84:ab:94:04:b0:de:7c:75:53:12:71:aa:
         27:91:ad:a7:09:62:03:1e:c2:48:7b:e1:ab:06:0c:2d:9f:8c:
         cf:fa:fb:83:80:35:7e:03:6c:77:c8:29:7c:cb:18:a9:9b:a7:
         23:6a:39:a6:5a:43:1d:ba:dc:ac:bb:d2:4e:4d:e1:9c:44:e4:
         b7:b9:b4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:de:a4:e8:b3:85:c2:b7:74:4d:d4:dd:42:5f:7f:11:3b:90:4f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:96:3d:06:43:c1:e6:7e:de:e8:e7:d0:e0:3e:d5:
                    a8:1f:08:fe:98:ef:b9:a3:3d:0f:14:a5:3e:85:27:
                    6a:a2:aa:8c:3b:f6:21:43:12:2d:c8:9c:b3:cf:a8:
                    ee:4f:8c:b7:3f:7f:49:49:a3:dc:17:3b:4b:28:2a:
                    93:ae:e1:df:7e:22:b2:1d:9c:5f:43:59:a5:4e:55:
                    dd:db:55:46:55:83:6d:48:76:ef:3f:77:24:58:d3:
                    7b:78:28:05:7c:66:7c:79:90:99:61:b6:cc:2d:b6:
                    ef:36:ca:11:3b:b5:65:c8:73:91:b0:10:12:17:a3:
                    e1:1c:ea:c7:dc:9c:b3:66:3d:ec:bb:a3:3e:99:e0:
                    04:98:4d:9c:b5:62:ad:16:71:22:00:68:ef:e6:42:
                    f6:05:28:4d:88:16:05:51:82:f6:d8:83:91:0c:13:
                    4c:3c:6e:d6:22:2a:52:da:37:56:a9:24:18:ba:8f:
                    2e:65:d9:3a:4b:e0:a3:69:94:3b:16:5e:4a:cc:a8:
                    6e:32:6d:f8:74:15:32:c8:9f:af:06:11:81:db:9a:
                    65:cf:01:05:2f:65:4b:71:4e:92:1c:06:51:7f:29:
                    57:e9:24:9f:89:f9:80:63:25:97:90:42:56:f8:e1:
                    26:61:b2:48:b3:20:9b:9a:9b:34:4e:2f:03:06:a7:
                    dc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7C:05:F1:0D:0B:C4:F8:8E:33:4C:F1:AE:78:6A:2C:16:AD:79:D0:A6
            X509v3 Authority Key Identifier: 
                keyid:F2:26:B1:CF:39:F4:1E:77:A5:A1:DA:65:4B:C4:D0:12:C9:53:25:AE

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         0f:2e:f4:4e:2f:4c:9e:4a:0d:e8:a7:17:85:4b:8e:a8:af:85:
         d8:fc:83:1b:41:5f:ec:5a:8c:2d:18:65:a2:9d:56:8a:f9:e0:
         39:21:a4:8f:73:4f:da:9c:c1:81:fd:e8:f8:66:d3:dc:0c:71:
         c6:9a:4a:6d:7f:20:f9:54:18:28:d3:d6:8d:ba:69:7a:61:c9:
         02:ae:ef:de:8e:20:36:a8:65:8d:86:d9:6c:af:39:90:9d:68:
         da:42:e9:67:02:82:3a:63:0b:f3:e9:13:ea:c3:a7:45:b8:de:
         6f:63:3a:3d:5a:53:b2:8f:7f:2c:ec:21:9b:d4:a5:89:19:76:
         3c:ea:79:7b:78:b7:bd:88:15:4f:72:41:1c:3c:98:6c:3c:39:
         6a:e4:78:c4:d8:e2:de:da:48:67:0b:7c:52:8e:54:21:a9:f5:
         0b:bb:07:e9:26:ca:f1:a3:a9:12:db:e2:e4:08:6c:0f:49:ec:
         07:db:df:35:4a:4a:57:c2:28:cb:84:2a:6c:61:31:22:d5:e5:
         b7:15:dd:2d:b4:bf:d6:1c:ea:66:42:fe:6a:5e:29:53:66:1b:
         f5:d3:8f:93:76:5f:9c:4d:81:b7:b0:40:40:1a:42:9a:2f:6d:
         6c:64:cf:15:25:aa:4e:17:98:2d:db:e1:da:a8:4a:37:a2:7f:
         59:1c:62:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:de:a4:e8:b3:85:c2:b7:74:4d:d4:dd:42:5f:7f:11:3b:90:4f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:09:a9:89:90:93:c8:33:6e:5b:db:e8:8e:
                    12:b1:4a:dd:a2:3a:60:ad:e7:26:98:bc:5f:63:12:
                    8d:39:97:38:53:96:ef:65:d9:43:06:fb:e7:1f:8d:
                    ac:32:87:84:ae:50:cc:8f:48:fa:b2:e2:7e:58:32:
                    2c:78:a0:c6:82:41:3c:4d:a1:01:43:0f:c4:a7:9d:
                    5d:24:16:39:b4:13:7b:09:b1:dc:3f:e5:ac:3b:d7:
                    53:b6:59:52:80:87:b2:12:65:6c:9c:fe:24:92:88:
                    ca:5a:ec:e4:04:81:a4:88:b2:3f:39:e1:4d:6b:91:
                    db:17:76:c3:0e:67:a4:5d:c8:e4:76:16:44:f7:76:
                    ae:db:63:7f:37:70:d0:e5:fc:df:08:0f:2e:f9:08:
                    72:f6:65:4f:af:15:97:a3:4c:03:f9:8f:5f:69:f8:
                    97:d8:dd:fe:e7:2c:1d:a3:d8:53:46:df:5c:c5:8e:
                    d8:38:41:ce:d7:ea:7f:f1:3b:0c:dd:13:dd:e7:2f:
                    44:24:aa:25:e3:eb:a1:8e:43:b1:5b:e3:b8:ad:aa:
                    1e:49:f0:77:40:64:ef:90:ad:72:a4:a0:d3:95:69:
                    96:4b:6d:08:34:97:cc:5e:5c:a5:08:c9:fa:66:60:
                    ec:f9:aa:86:d8:bc:21:b7:78:bf:f2:28:01:41:3d:
                    a4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F2:26:B1:CF:39:F4:1E:77:A5:A1:DA:65:4B:C4:D0:12:C9:53:25:AE
            X509v3 Authority Key Identifier: 
                keyid:F2:26:B1:CF:39:F4:1E:77:A5:A1:DA:65:4B:C4:D0:12:C9:53:25:AE

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         b7:c0:ee:7e:69:af:13:50:07:52:58:73:76:5b:e4:ef:8e:1e:
         40:07:cb:e3:af:6e:b9:fd:25:b4:9d:da:7e:21:df:48:3d:b1:
         6a:56:69:bc:91:16:b7:fa:17:0d:aa:6f:0b:2d:9d:d4:e4:62:
         aa:52:64:22:22:90:c4:fa:7e:ce:b5:d9:8c:b2:0e:2e:f5:d5:
         c0:a3:cd:94:de:60:0f:07:f9:5b:68:a6:79:8b:38:85:df:9a:
         3a:b4:14:4e:90:60:5c:65:c7:d2:fd:fb:be:1a:4b:b6:0b:87:
         35:31:00:aa:25:c6:f3:4e:dc:84:f5:87:34:67:85:a3:71:d3:
         81:c0:99:c4:0c:b5:f3:bf:02:40:90:5b:b2:d0:d9:93:98:08:
         1a:4c:15:26:ab:90:db:0f:4b:e4:14:8f:a8:72:4b:58:c8:4b:
         a2:4c:a8:a4:67:a9:c6:7b:f0:2a:4b:50:80:de:d3:45:0f:8d:
         5c:de:ba:15:b3:b2:8e:08:f8:e9:d7:34:5d:0e:95:57:98:8c:
         e9:18:0e:27:00:0f:61:64:7c:26:58:3e:94:1d:c4:e9:04:33:
         03:03:02:b2:5e:05:27:f4:c0:a4:2a:eb:6d:fc:a8:1d:a0:2c:
         aa:65:1e:c5:78:be:d6:6e:f8:74:1e:14:c6:29:4f:b1:73:78:
         ee:24:25:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----