| [Created by: generate-chains.py] |
| |
| Certificate chain where the root certificate lacks a basic constraints |
| extension. |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 6f:30:93:e0:af:42:20:f7:92:d9:8d:63:e4:7e:ee:e3:df:49:cd:56 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Intermediate |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Target |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:e0:2c:39:1a:67:64:64:af:b8:19:4f:41:9e:78: |
| a6:a8:fc:a4:43:70:a7:7c:23:f9:27:a0:7f:98:37: |
| e7:ee:fe:be:2d:82:65:9e:46:15:1e:fc:3d:70:36: |
| 96:47:69:6a:c0:51:c5:f1:59:2a:d7:1e:3f:b3:2e: |
| df:ac:af:89:16:45:ed:71:ae:38:04:4d:5e:e7:b8: |
| d9:a1:45:14:a5:f9:a4:f7:e3:e7:e4:e9:ac:7e:82: |
| 95:e6:5c:8e:ac:da:14:d5:2f:04:ed:48:f7:56:4b: |
| 5a:98:72:0f:07:66:ca:17:a5:0e:b7:05:64:3b:6a: |
| 97:ad:b1:7e:4d:b3:8c:d4:2b:23:3d:88:bb:c9:80: |
| 04:d9:5b:1a:36:37:ab:d2:c7:06:a8:81:6f:62:b7: |
| c1:74:74:8e:ee:f6:6b:c0:15:28:44:50:85:dc:8d: |
| 3b:e7:0b:82:9d:bd:db:20:69:1a:55:68:48:0e:84: |
| 2a:25:26:ca:01:ad:16:7f:3c:30:d4:5b:47:9a:86: |
| fe:fc:90:b5:d0:bb:d3:ee:af:9a:80:3c:4c:da:46: |
| c8:db:36:68:89:51:fe:76:78:cf:22:eb:ce:62:d4: |
| 2c:2b:c7:7c:24:48:64:ca:9b:91:b2:90:fc:c9:29: |
| 65:70:83:60:05:1a:32:70:ca:12:f3:70:52:dd:3e: |
| 82:b1 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 98:FA:6D:F3:B3:9E:A3:B9:81:22:1C:C5:19:24:06:BC:D9:D6:92:ED |
| X509v3 Authority Key Identifier: |
| keyid:C1:E9:0B:DE:AA:27:20:FA:0B:FF:DB:77:09:96:1E:9B:2C:0D:F7:70 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Intermediate.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Intermediate.crl |
| |
| X509v3 Key Usage: critical |
| Digital Signature, Key Encipherment |
| X509v3 Extended Key Usage: |
| TLS Web Server Authentication, TLS Web Client Authentication |
| Signature Algorithm: sha256WithRSAEncryption |
| dc:98:1f:bb:fe:44:0f:10:3f:47:46:4e:e3:3d:09:c0:5f:75: |
| 1a:c1:84:c8:83:c3:02:d4:dd:f2:1d:00:ac:c5:d4:e8:f7:cd: |
| 53:f6:56:44:a6:82:22:50:ba:d4:5e:e8:a2:9b:95:33:8f:0a: |
| 09:e9:a9:3d:d5:d6:a8:37:7b:ff:8c:20:c9:81:87:79:57:39: |
| bc:4c:a5:8a:0b:ca:1b:7c:23:51:95:b2:2a:b6:23:a6:00:98: |
| c1:28:c2:5a:35:86:b6:ad:fa:4d:84:97:85:10:e5:ed:f7:7b: |
| 1f:ac:93:4c:a0:78:f2:d1:5e:31:30:1c:4b:87:35:d9:51:d6: |
| c2:ff:3e:33:38:f8:c3:cd:47:d5:60:b6:ca:53:bb:79:b6:29: |
| 3b:57:1a:9e:38:7e:b5:5d:e6:31:41:54:3e:73:48:94:33:2c: |
| f2:87:b7:1f:a9:1c:b7:35:94:c0:6f:5c:51:80:b1:24:97:21: |
| ef:56:84:d1:93:bb:07:eb:18:7a:60:84:32:d2:c3:c0:fd:4f: |
| 63:d6:54:5f:2b:dc:66:dc:ac:3c:bc:46:74:04:5b:de:db:9b: |
| 5e:6a:98:10:f8:3e:a3:41:8c:69:6e:49:66:07:f4:b8:58:2d: |
| e4:8e:c7:ab:42:a4:20:fb:8f:49:11:7e:38:a1:4e:43:da:36: |
| df:46:2e:d6 |
| -----BEGIN CERTIFICATE----- |
| MIIDoDCCAoigAwIBAgIUbzCT4K9CIPeS2Y1j5H7u499JzVYwDQYJKoZIhvcNAQEL |
| BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTE4MDMxMDEyMDAwMFoXDTIx |
| MDEwMTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF |
| AAOCAQ8AMIIBCgKCAQEA4Cw5GmdkZK+4GU9BnnimqPykQ3CnfCP5J6B/mDfn7v6+ |
| LYJlnkYVHvw9cDaWR2lqwFHF8Vkq1x4/sy7frK+JFkXtca44BE1e57jZoUUUpfmk |
| 9+Pn5OmsfoKV5lyOrNoU1S8E7Uj3VktamHIPB2bKF6UOtwVkO2qXrbF+TbOM1Csj |
| PYi7yYAE2VsaNjer0scGqIFvYrfBdHSO7vZrwBUoRFCF3I075wuCnb3bIGkaVWhI |
| DoQqJSbKAa0Wfzww1FtHmob+/JC10LvT7q+agDxM2kbI2zZoiVH+dnjPIuvOYtQs |
| K8d8JEhkypuRspD8ySllcINgBRoycMoS83BS3T6CsQIDAQABo4HpMIHmMB0GA1Ud |
| DgQWBBSY+m3zs56juYEiHMUZJAa82daS7TAfBgNVHSMEGDAWgBTB6Qveqicg+gv/ |
| 23cJlh6bLA33cDA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91 |
| cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0 |
| dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIF |
| oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD |
| ggEBANyYH7v+RA8QP0dGTuM9CcBfdRrBhMiDwwLU3fIdAKzF1Oj3zVP2VkSmgiJQ |
| utRe6KKblTOPCgnpqT3V1qg3e/+MIMmBh3lXObxMpYoLyht8I1GVsiq2I6YAmMEo |
| wlo1hrat+k2El4UQ5e33ex+sk0ygePLRXjEwHEuHNdlR1sL/PjM4+MPNR9VgtspT |
| u3m2KTtXGp44frVd5jFBVD5zSJQzLPKHtx+pHLc1lMBvXFGAsSSXIe9WhNGTuwfr |
| GHpghDLSw8D9T2PWVF8r3GbcrDy8RnQEW97bm15qmBD4PqNBjGluSWYH9LhYLeSO |
| x6tCpCD7j0kRfjihTkPaNt9GLtY= |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 08:55:78:34:50:50:34:15:fe:10:58:e3:0b:cb:6b:c3:c6:56:3d:16 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Intermediate |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:de:e6:c0:76:c5:4c:d0:8e:b3:87:07:91:66:aa: |
| f1:ae:93:8f:a2:83:2d:d5:05:91:b8:52:f6:2d:a5: |
| ff:fd:95:ee:85:0f:85:c3:eb:d7:8e:f7:6f:2a:c0: |
| 15:de:ae:1e:62:62:12:64:c3:f7:c1:0f:05:a4:0f: |
| b7:33:69:92:66:57:93:4f:4e:04:43:bb:23:bb:c3: |
| c6:29:0b:42:68:1f:26:81:77:2d:91:f6:62:b8:e3: |
| 9a:2c:78:2d:7c:1f:3a:f5:ce:f2:c2:75:39:5a:b7: |
| c2:23:f5:f5:ee:7e:a5:7a:45:c4:d4:1e:12:c8:a6: |
| 40:44:64:07:ff:33:a8:ce:41:df:77:c4:01:f5:c5: |
| 41:6b:4e:a0:ee:9d:36:63:5a:b0:e8:38:bb:bd:fb: |
| a5:7f:6e:5c:6d:c6:62:dd:05:2f:90:d4:fb:5b:18: |
| 71:84:57:e2:c9:d3:cc:c8:36:5f:d1:78:20:4c:68: |
| 83:1f:df:64:a3:11:9f:e8:bd:d4:bb:8e:04:63:0d: |
| 3d:6d:a9:43:30:5d:f0:ca:e3:62:8f:11:9e:8b:8f: |
| de:9a:6e:6d:03:e5:8c:0f:6f:00:6e:1a:72:2c:13: |
| e0:a1:78:93:ef:2c:6d:2c:0a:8a:5c:02:65:50:36: |
| fa:da:07:ba:36:b9:21:eb:01:14:97:ab:19:60:be: |
| 97:6b |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| C1:E9:0B:DE:AA:27:20:FA:0B:FF:DB:77:09:96:1E:9B:2C:0D:F7:70 |
| X509v3 Authority Key Identifier: |
| keyid:96:9F:CB:9C:5C:0D:06:9D:F1:3A:21:D5:22:F7:4B:75:2C:7D:D3:D3 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 9b:6f:11:4f:45:79:f3:a4:a8:35:ab:25:fd:ff:fd:a0:c5:9a: |
| d1:0a:5d:b0:60:f2:2e:37:48:9b:c8:74:1a:58:57:06:bb:0b: |
| f2:98:04:5d:69:88:a2:01:20:b1:07:eb:80:b6:9b:48:0a:0b: |
| 38:b1:b5:e5:9c:85:ea:88:61:27:00:29:41:31:fc:77:5c:ff: |
| 3c:9e:ad:f7:83:c4:77:7f:50:58:18:7b:fb:43:36:53:a1:92: |
| 3c:a6:75:0e:04:eb:b3:63:27:32:3c:e7:a5:95:d1:99:b7:90: |
| bc:d4:20:2f:44:86:27:74:6d:c4:00:04:bd:f9:5b:e5:48:30: |
| d0:61:db:e6:f7:66:96:45:90:f3:07:1e:60:c5:06:c4:60:52: |
| ec:1a:87:d9:19:e2:5d:43:b2:1e:48:da:5c:ae:7f:c4:f3:30: |
| ac:f4:77:47:cd:30:a1:46:a4:ff:60:32:c8:67:f5:92:32:ca: |
| 34:b3:94:13:00:73:30:80:6a:b1:a2:16:ca:31:40:74:11:0d: |
| 91:a0:94:36:36:21:c5:91:0e:45:7b:fa:17:13:64:b3:ab:70: |
| c3:f1:a7:e8:dd:8b:c6:bf:dc:44:23:b7:e1:1a:f0:9d:54:00: |
| 31:66:23:a3:f5:63:7e:f2:95:37:e9:3e:d0:7d:44:cd:41:8d: |
| a7:ca:c9:86 |
| -----BEGIN CERTIFICATE----- |
| MIIDgDCCAmigAwIBAgIUCFV4NFBQNBX+EFjjC8trw8ZWPRYwDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw |
| MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD |
| ggEPADCCAQoCggEBAN7mwHbFTNCOs4cHkWaq8a6Tj6KDLdUFkbhS9i2l//2V7oUP |
| hcPr1473byrAFd6uHmJiEmTD98EPBaQPtzNpkmZXk09OBEO7I7vDxikLQmgfJoF3 |
| LZH2Yrjjmix4LXwfOvXO8sJ1OVq3wiP19e5+pXpFxNQeEsimQERkB/8zqM5B33fE |
| AfXFQWtOoO6dNmNasOg4u737pX9uXG3GYt0FL5DU+1sYcYRX4snTzMg2X9F4IExo |
| gx/fZKMRn+i91LuOBGMNPW2pQzBd8MrjYo8RnouP3ppubQPljA9vAG4aciwT4KF4 |
| k+8sbSwKilwCZVA2+toHuja5IesBFJerGWC+l2sCAwEAAaOByzCByDAdBgNVHQ4E |
| FgQUwekL3qonIPoL/9t3CZYemywN93AwHwYDVR0jBBgwFoAUlp/LnFwNBp3xOiHV |
| IvdLdSx909MwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs |
| LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m |
| b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/ |
| MA0GCSqGSIb3DQEBCwUAA4IBAQCbbxFPRXnzpKg1qyX9//2gxZrRCl2wYPIuN0ib |
| yHQaWFcGuwvymARdaYiiASCxB+uAtptICgs4sbXlnIXqiGEnAClBMfx3XP88nq33 |
| g8R3f1BYGHv7QzZToZI8pnUOBOuzYycyPOelldGZt5C81CAvRIYndG3EAAS9+Vvl |
| SDDQYdvm92aWRZDzBx5gxQbEYFLsGofZGeJdQ7IeSNpcrn/E8zCs9HdHzTChRqT/ |
| YDLIZ/WSMso0s5QTAHMwgGqxohbKMUB0EQ2RoJQ2NiHFkQ5Fe/oXE2Szq3DD8afo |
| 3YvGv9xEI7fhGvCdVAAxZiOj9WN+8pU36T7QfUTNQY2nysmG |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 08:55:78:34:50:50:34:15:fe:10:58:e3:0b:cb:6b:c3:c6:56:3d:15 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Root |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:b7:0e:0c:2e:e1:46:5f:9d:dc:3a:16:51:56:2f: |
| 4c:5c:f7:92:93:2a:a1:bf:d1:bd:15:cd:8a:f8:e3: |
| 8a:a4:41:fa:9f:de:85:84:ff:cd:5b:7d:13:33:ca: |
| b8:8b:34:f6:85:73:a5:23:ef:ba:61:ca:18:9f:08: |
| ea:39:17:18:69:dd:3a:21:57:a5:6d:b2:63:a7:42: |
| ba:b6:8a:4e:e2:1f:ab:88:4f:ae:ca:1a:66:b8:79: |
| d2:94:73:b9:46:c4:be:89:31:53:c1:d8:b4:cc:1c: |
| 6b:d9:0c:a3:5a:e3:a5:20:7c:a0:bd:d4:14:7a:14: |
| 29:0c:b7:40:da:f5:fc:af:c3:91:65:78:b3:41:ee: |
| f5:9f:0b:22:0b:c1:f5:12:94:89:25:13:1b:dd:a3: |
| a3:44:7a:57:7c:40:17:e0:66:33:a9:27:7c:2e:6f: |
| 9f:38:d3:fa:4d:67:80:39:33:36:e5:41:fd:ac:6b: |
| 37:d0:84:75:e2:84:93:3b:8d:ce:8c:22:98:4e:05: |
| 64:7f:df:fb:96:85:c5:ea:0e:11:24:f9:84:bd:17: |
| ce:15:30:86:ad:c6:de:2c:48:84:d0:45:d4:0b:1f: |
| 13:e9:a4:ca:e7:69:c0:24:a1:23:5e:6b:4e:76:b4: |
| bd:d7:0d:96:94:b6:d9:8e:25:9b:1e:c9:a2:00:10: |
| 47:77 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 96:9F:CB:9C:5C:0D:06:9D:F1:3A:21:D5:22:F7:4B:75:2C:7D:D3:D3 |
| X509v3 Authority Key Identifier: |
| keyid:96:9F:CB:9C:5C:0D:06:9D:F1:3A:21:D5:22:F7:4B:75:2C:7D:D3:D3 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| Signature Algorithm: sha256WithRSAEncryption |
| 39:e3:03:46:2c:4c:a7:29:17:56:98:74:e3:d8:0e:3d:83:55: |
| fd:9e:25:75:9f:88:d5:23:89:32:00:d2:73:3b:dc:ab:7f:6e: |
| 65:7e:e6:b7:13:c1:77:4b:71:26:dc:99:2a:2f:d6:4d:ba:b4: |
| d3:34:39:13:26:2c:b1:f9:d4:77:92:35:10:fd:92:e5:42:96: |
| 56:3b:8d:91:11:f3:d9:fe:ac:f0:7b:78:d5:fb:ad:08:51:31: |
| b4:43:47:cc:e8:0b:e3:ca:f0:9f:2c:7f:0b:7f:79:a0:ad:f6: |
| 49:85:0c:78:cd:65:03:15:9d:3b:70:89:30:aa:cd:94:9f:59: |
| 33:c7:29:b0:86:a0:cc:9c:80:3c:a1:cf:df:cb:85:d4:32:44: |
| a1:5f:90:d7:75:ad:52:d9:30:31:ee:80:b5:d5:3b:bd:33:6b: |
| 2b:5b:2c:ed:c2:d2:57:7d:12:91:c6:3e:c9:28:76:a7:2e:17: |
| 05:a5:74:40:5c:05:df:82:7c:54:33:9a:47:18:ae:77:c5:49: |
| 4c:2c:f3:24:17:12:a0:f9:24:c7:73:e3:84:4c:24:8b:b3:b9: |
| 67:e7:c5:85:e1:76:45:5a:d7:6b:76:57:af:4b:6f:24:52:a5: |
| 8b:bf:9b:68:9d:94:38:03:2c:c4:b0:85:b9:28:29:7c:c7:7b: |
| b1:15:a9:2e |
| -----BEGIN CERTIFICATE----- |
| MIIDZzCCAk+gAwIBAgIUCFV4NFBQNBX+EFjjC8trw8ZWPRUwDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw |
| MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK |
| AoIBAQC3Dgwu4UZfndw6FlFWL0xc95KTKqG/0b0VzYr444qkQfqf3oWE/81bfRMz |
| yriLNPaFc6Uj77phyhifCOo5Fxhp3TohV6VtsmOnQrq2ik7iH6uIT67KGma4edKU |
| c7lGxL6JMVPB2LTMHGvZDKNa46UgfKC91BR6FCkMt0Da9fyvw5FleLNB7vWfCyIL |
| wfUSlIklExvdo6NEeld8QBfgZjOpJ3wub5840/pNZ4A5MzblQf2sazfQhHXihJM7 |
| jc6MIphOBWR/3/uWhcXqDhEk+YS9F84VMIatxt4sSITQRdQLHxPppMrnacAkoSNe |
| a052tL3XDZaUttmOJZseyaIAEEd3AgMBAAGjgbowgbcwHQYDVR0OBBYEFJafy5xc |
| DQad8Toh1SL3S3UsfdPTMB8GA1UdIwQYMBaAFJafy5xcDQad8Toh1SL3S3UsfdPT |
| MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh |
| L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S |
| b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQELBQADggEBADnjA0Ys |
| TKcpF1aYdOPYDj2DVf2eJXWfiNUjiTIA0nM73Kt/bmV+5rcTwXdLcSbcmSov1k26 |
| tNM0ORMmLLH51HeSNRD9kuVCllY7jZER89n+rPB7eNX7rQhRMbRDR8zoC+PK8J8s |
| fwt/eaCt9kmFDHjNZQMVnTtwiTCqzZSfWTPHKbCGoMycgDyhz9/LhdQyRKFfkNd1 |
| rVLZMDHugLXVO70zaytbLO3C0ld9EpHGPskodqcuFwWldEBcBd+CfFQzmkcYrnfF |
| SUws8yQXEqD5JMdz44RMJIuzuWfnxYXhdkVa12t2V69LbyRSpYu/m2idlDgDLMSw |
| hbkoKXzHe7EVqS4= |
| -----END CERTIFICATE----- |
