| [Created by: generate-chains.py] |
| |
| Certificate chain where the intermediate's Basic Constraints extension is |
| not marked as critical. |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 4a:45:83:31:ef:c5:47:03:ae:f7:5a:80:bf:fb:8c:bc:23:1e:dc:c4 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Intermediate |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Target |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:d8:cc:f6:ec:23:eb:20:d2:0e:7e:29:04:ec:8c: |
| b9:bd:ee:47:6e:0b:ac:a9:fa:22:a4:fc:41:74:04: |
| d0:b5:8a:37:56:29:d5:be:e7:e0:45:88:30:d9:5a: |
| e0:a7:69:fd:d1:c3:4d:1c:42:68:ae:7d:cf:54:db: |
| 84:b9:91:e6:68:c5:d1:6d:a4:34:4a:7f:8f:3e:a3: |
| a8:c4:0e:3f:90:42:a9:b8:84:c2:fd:51:ed:eb:e9: |
| 6d:cc:5a:22:f7:fb:eb:29:7d:5d:97:9d:26:eb:10: |
| 29:bf:2a:bd:b0:2f:33:9b:e7:a3:17:9b:db:b4:ce: |
| f8:5e:66:25:7c:8c:e3:c8:53:cf:c2:c3:80:cf:e6: |
| 68:98:ca:bd:e3:b8:d3:bc:e2:03:d0:31:5b:ef:21: |
| 6d:2d:42:5e:cb:9a:3a:4d:7a:bd:e7:75:75:ff:63: |
| 95:aa:08:20:fb:a8:6f:95:a9:ea:45:07:c4:a7:32: |
| 89:58:94:98:76:2f:5d:d4:85:90:e3:be:96:33:1c: |
| 53:d7:bd:58:87:75:4e:8c:c9:c9:6b:c8:b6:3f:d3: |
| 46:1a:9f:4c:de:a5:48:cd:ad:87:fe:7a:82:f2:0c: |
| 65:84:f5:09:ce:cf:fd:6c:66:57:91:dc:fb:85:d1: |
| ff:b2:4c:ce:2f:a3:73:b1:dc:1e:13:5c:03:1a:a6: |
| 99:13 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| FD:20:6C:45:13:AE:E6:1F:25:FD:C9:1E:E3:09:32:CC:34:28:4E:CF |
| X509v3 Authority Key Identifier: |
| keyid:5A:44:77:BA:2D:5E:48:FE:11:68:59:58:40:91:67:E2:22:BF:31:38 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Intermediate.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Intermediate.crl |
| |
| X509v3 Key Usage: critical |
| Digital Signature, Key Encipherment |
| X509v3 Extended Key Usage: |
| TLS Web Server Authentication, TLS Web Client Authentication |
| Signature Algorithm: sha256WithRSAEncryption |
| d3:43:07:5a:74:71:a0:d8:cd:c2:ac:57:48:ac:61:24:65:99: |
| 15:1f:33:cd:b2:1a:60:f7:49:24:8b:93:ab:fd:b1:44:28:2f: |
| d0:bb:13:b6:9c:d4:95:12:13:c4:9c:2b:ea:6f:eb:23:8d:46: |
| d5:a2:ed:e2:79:29:80:16:f7:06:78:df:d4:c0:81:72:f0:53: |
| 13:45:a5:d9:03:e2:13:f9:d2:a1:30:ed:d3:82:74:eb:2c:48: |
| de:0b:3f:67:59:3b:a7:ca:be:33:82:9c:b9:1e:96:f6:99:f9: |
| a5:e2:1b:43:3d:a2:2b:53:b4:e1:f3:56:c0:17:f4:bf:2e:4a: |
| 0c:a3:e9:80:0d:41:53:0c:0b:26:60:3e:d6:d1:de:41:35:7c: |
| 7e:e1:a0:b6:7c:63:a7:78:cd:ef:5e:95:27:da:b4:14:4d:38: |
| 8e:01:ef:4f:12:44:39:38:3b:b4:fb:09:73:1a:35:f6:70:0e: |
| ee:54:92:81:51:67:ab:47:2c:68:a1:9a:97:af:05:8a:1f:99: |
| 0d:6d:b5:1e:92:64:20:f1:d1:67:17:cb:45:6f:65:33:e9:a7: |
| 14:4e:bf:9c:e1:4b:4b:d8:82:ba:d4:bf:3e:cb:6a:12:3a:4f: |
| 3f:09:3d:bc:1e:a5:2d:d7:f4:69:6e:d1:6f:40:c0:fb:43:97: |
| 4d:37:b6:f1 |
| -----BEGIN CERTIFICATE----- |
| MIIDoDCCAoigAwIBAgIUSkWDMe/FRwOu91qAv/uMvCMe3MQwDQYJKoZIhvcNAQEL |
| BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTE4MDMxMDEyMDAwMFoXDTIx |
| MDEwMTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF |
| AAOCAQ8AMIIBCgKCAQEA2Mz27CPrINIOfikE7Iy5ve5HbgusqfoipPxBdATQtYo3 |
| VinVvufgRYgw2Vrgp2n90cNNHEJorn3PVNuEuZHmaMXRbaQ0Sn+PPqOoxA4/kEKp |
| uITC/VHt6+ltzFoi9/vrKX1dl50m6xApvyq9sC8zm+ejF5vbtM74XmYlfIzjyFPP |
| wsOAz+ZomMq947jTvOID0DFb7yFtLUJey5o6TXq953V1/2OVqggg+6hvlanqRQfE |
| pzKJWJSYdi9d1IWQ476WMxxT171Yh3VOjMnJa8i2P9NGGp9M3qVIza2H/nqC8gxl |
| hPUJzs/9bGZXkdz7hdH/skzOL6NzsdweE1wDGqaZEwIDAQABo4HpMIHmMB0GA1Ud |
| DgQWBBT9IGxFE67mHyX9yR7jCTLMNChOzzAfBgNVHSMEGDAWgBRaRHe6LV5I/hFo |
| WVhAkWfiIr8xODA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91 |
| cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0 |
| dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIF |
| oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD |
| ggEBANNDB1p0caDYzcKsV0isYSRlmRUfM82yGmD3SSSLk6v9sUQoL9C7E7ac1JUS |
| E8ScK+pv6yONRtWi7eJ5KYAW9wZ439TAgXLwUxNFpdkD4hP50qEw7dOCdOssSN4L |
| P2dZO6fKvjOCnLkelvaZ+aXiG0M9oitTtOHzVsAX9L8uSgyj6YANQVMMCyZgPtbR |
| 3kE1fH7hoLZ8Y6d4ze9elSfatBRNOI4B708SRDk4O7T7CXMaNfZwDu5UkoFRZ6tH |
| LGihmpevBYofmQ1ttR6SZCDx0WcXy0VvZTPppxROv5zhS0vYgrrUvz7LahI6Tz8J |
| PbwepS3X9Glu0W9AwPtDl003tvE= |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 2d:b0:5d:cd:6e:fd:4d:77:89:ef:99:fc:fd:05:d3:22:44:3f:93:ef |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Intermediate |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:fb:af:dd:12:ab:aa:06:e0:72:bd:43:4c:3e:5b: |
| cd:02:9c:ca:c1:42:6d:cd:47:6e:6c:4c:6b:3f:2e: |
| c1:3f:2e:88:3d:77:4f:1c:34:60:ba:f7:fb:58:64: |
| 3c:c2:76:5d:30:88:48:22:81:2f:27:c8:1f:b4:ed: |
| 96:07:5d:f7:7c:4a:37:be:fe:4f:7b:1f:19:82:21: |
| 24:18:c9:ae:a7:a5:58:62:9d:6b:f9:9a:88:56:0f: |
| 7f:b4:0c:1a:d5:4f:ab:2c:c4:97:6e:ec:db:b1:a0: |
| 43:86:34:08:2e:21:16:f8:f6:3e:2a:e8:ca:9a:a4: |
| fb:91:7e:f9:43:19:42:08:10:7e:92:af:60:45:4e: |
| 30:e4:d3:d3:e9:bf:32:cf:c1:1b:a0:52:6e:a4:aa: |
| ed:13:6d:e8:7f:68:c6:88:84:67:20:8f:6b:82:9c: |
| 49:5d:b4:95:63:9d:0a:dc:9f:ab:7b:b3:eb:f7:ad: |
| 48:35:f5:44:ec:84:23:e1:5b:ca:49:16:e0:c2:5a: |
| 8f:3e:d2:2b:fa:50:08:bf:12:3b:da:8c:96:66:93: |
| 69:5b:27:4e:b8:e7:8d:11:14:e6:29:23:b5:d9:f7: |
| b0:f9:e2:90:e2:d8:be:8d:1d:dc:89:f5:eb:15:df: |
| 58:88:e8:91:14:94:9d:37:e3:10:1a:de:30:3c:18: |
| d7:6f |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 5A:44:77:BA:2D:5E:48:FE:11:68:59:58:40:91:67:E2:22:BF:31:38 |
| X509v3 Authority Key Identifier: |
| keyid:B8:16:92:87:E1:0C:B9:E5:61:C3:DA:A5:05:11:6A:58:DD:78:65:8E |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 58:91:e0:fe:34:bc:ad:76:b1:db:0f:36:82:66:95:b5:59:7c: |
| eb:57:19:5a:95:98:47:99:10:25:84:ce:6a:c4:4d:14:cc:75: |
| 79:e3:95:27:6d:ad:e6:d3:0f:6c:04:7c:25:29:37:89:b4:ae: |
| 08:30:81:6e:06:8f:0a:8f:d4:a4:f0:2e:5c:2a:3c:a7:69:c9: |
| f8:a8:43:38:6b:b4:20:5a:89:0f:00:f0:fe:ab:ae:5b:69:b2: |
| 49:a8:e6:17:44:e3:1c:46:2a:37:62:7a:a6:4b:81:57:b3:9c: |
| 22:c2:be:58:62:86:29:7b:27:ef:a7:a8:11:97:bd:f6:0a:73: |
| e4:83:53:49:6c:27:0f:b7:6f:2b:72:dc:0d:99:5e:a3:e5:5e: |
| 6d:c9:b0:f7:a8:4b:83:24:a3:3c:fe:51:c1:f7:2d:c8:64:0e: |
| d7:0a:92:30:96:03:cd:97:44:58:a5:08:ec:f0:d1:47:b1:9b: |
| 5b:6f:4d:f1:11:c9:6c:4b:ca:e2:65:0e:f6:cf:2d:1a:aa:ae: |
| e2:5b:fe:04:dd:55:51:da:d2:ce:f4:3e:ab:09:02:6b:d4:90: |
| e2:4b:30:d7:1f:19:64:19:b9:1f:56:a4:95:2b:94:f4:3f:78: |
| 02:50:12:f4:4e:5d:fa:d2:1b:cf:6b:63:dd:c0:1e:13:1a:5e: |
| db:9c:f4:06 |
| -----BEGIN CERTIFICATE----- |
| MIIDfTCCAmWgAwIBAgIULbBdzW79TXeJ75n8/QXTIkQ/k+8wDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw |
| MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD |
| ggEPADCCAQoCggEBAPuv3RKrqgbgcr1DTD5bzQKcysFCbc1HbmxMaz8uwT8uiD13 |
| Txw0YLr3+1hkPMJ2XTCISCKBLyfIH7Ttlgdd93xKN77+T3sfGYIhJBjJrqelWGKd |
| a/maiFYPf7QMGtVPqyzEl27s27GgQ4Y0CC4hFvj2Piroypqk+5F++UMZQggQfpKv |
| YEVOMOTT0+m/Ms/BG6BSbqSq7RNt6H9oxoiEZyCPa4KcSV20lWOdCtyfq3uz6/et |
| SDX1ROyEI+FbykkW4MJajz7SK/pQCL8SO9qMlmaTaVsnTrjnjREU5ikjtdn3sPni |
| kOLYvo0d3In16xXfWIjokRSUnTfjEBreMDwY128CAwEAAaOByDCBxTAdBgNVHQ4E |
| FgQUWkR3ui1eSP4RaFlYQJFn4iK/MTgwHwYDVR0jBBgwFoAUuBaSh+EMueVhw9ql |
| BRFqWN14ZY4wNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs |
| LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m |
| b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAMBgNVHRMEBTADAQH/MA0G |
| CSqGSIb3DQEBCwUAA4IBAQBYkeD+NLytdrHbDzaCZpW1WXzrVxlalZhHmRAlhM5q |
| xE0UzHV545Unba3m0w9sBHwlKTeJtK4IMIFuBo8Kj9Sk8C5cKjynacn4qEM4a7Qg |
| WokPAPD+q65babJJqOYXROMcRio3YnqmS4FXs5wiwr5YYoYpeyfvp6gRl732CnPk |
| g1NJbCcPt28rctwNmV6j5V5tybD3qEuDJKM8/lHB9y3IZA7XCpIwlgPNl0RYpQjs |
| 8NFHsZtbb03xEclsS8riZQ72zy0aqq7iW/4E3VVR2tLO9D6rCQJr1JDiSzDXHxlk |
| GbkfVqSVK5T0P3gCUBL0Tl360hvPa2PdwB4TGl7bnPQG |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 2d:b0:5d:cd:6e:fd:4d:77:89:ef:99:fc:fd:05:d3:22:44:3f:93:ee |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Root |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:aa:94:1d:65:8c:79:04:f0:c9:d1:3c:23:76:e9: |
| 3e:2c:c9:52:e1:fc:b9:bf:35:8d:66:e4:37:66:b5: |
| 4b:ff:1a:9b:cb:30:e1:d4:30:54:fb:6e:f2:43:fd: |
| 76:b8:84:51:79:12:5a:65:95:87:ec:3d:19:b0:ab: |
| 04:94:64:aa:bc:e5:bf:e2:77:fd:07:28:3c:b5:20: |
| da:55:2c:79:04:f2:71:6e:31:b4:63:14:80:4e:c3: |
| 83:1e:ea:7e:5a:c0:4d:48:4a:2e:9e:52:80:80:98: |
| 22:10:4a:05:d7:db:13:8f:37:67:20:63:19:01:92: |
| 07:46:94:b5:c9:ba:e7:68:af:06:57:35:69:50:50: |
| 22:23:0b:92:a1:98:32:08:88:5c:8b:4c:7c:a5:6a: |
| f3:31:ee:bf:4c:59:b0:a1:cb:e8:28:1d:fa:4c:d3: |
| 1b:e6:2b:03:1a:4f:b5:8d:93:5d:18:95:c7:93:c1: |
| 8b:6f:55:17:34:17:e9:d8:70:47:c8:4c:b2:5a:fa: |
| a7:aa:66:b7:a3:62:17:0a:7c:27:15:ef:c2:bc:5b: |
| 7a:7d:88:c7:2a:45:0c:d7:3b:91:7e:72:c6:30:cb: |
| 12:39:1e:a2:8a:88:39:30:f0:54:b4:19:6f:b6:5e: |
| e8:01:60:2c:2b:27:cb:e5:93:49:ab:b8:9e:f0:29: |
| e6:c7 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| B8:16:92:87:E1:0C:B9:E5:61:C3:DA:A5:05:11:6A:58:DD:78:65:8E |
| X509v3 Authority Key Identifier: |
| keyid:B8:16:92:87:E1:0C:B9:E5:61:C3:DA:A5:05:11:6A:58:DD:78:65:8E |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 3d:d2:b8:8f:57:04:ce:d4:1b:a2:94:e8:1b:2c:aa:b4:47:9d: |
| c2:0d:5c:5e:85:0a:cd:fa:95:da:5b:25:34:31:19:d6:e3:db: |
| 9b:4a:ee:4a:7b:f8:80:19:bc:a4:2d:da:db:c2:dd:27:7a:bb: |
| b9:ba:33:4d:88:ed:b2:3d:d0:3c:a8:d3:ef:d0:8e:e6:58:cc: |
| 3a:60:4d:48:b6:8f:09:82:87:9a:87:90:e2:e7:1f:b8:a9:5b: |
| 72:ab:36:a4:aa:67:82:63:a1:5b:45:12:09:4b:62:c8:1d:8b: |
| d1:1b:e2:4a:d9:05:e9:38:3c:db:a7:d7:2d:55:51:76:28:a5: |
| 46:8c:a2:38:8d:5e:60:27:74:7a:22:2d:2f:2a:06:76:bb:4e: |
| 3c:82:08:00:ca:9e:42:81:71:54:a4:f6:52:21:11:04:1f:ba: |
| b5:cc:95:74:b0:13:ff:6e:12:0a:80:51:d7:f5:b1:81:cc:30: |
| dc:2c:6c:ff:16:6e:34:dd:77:c4:bf:9b:d7:fa:0b:7e:2f:84: |
| ab:61:58:95:d5:04:8e:7a:8b:ad:69:10:e9:d7:80:d9:74:1a: |
| 32:09:fc:6b:37:1a:2b:4f:d3:ec:5b:f1:ea:f9:1a:93:8b:c9: |
| 92:09:a5:80:d3:11:ea:75:08:61:57:21:6b:74:cd:e7:7d:3b: |
| c2:1c:11:e3 |
| -----BEGIN CERTIFICATE----- |
| MIIDeDCCAmCgAwIBAgIULbBdzW79TXeJ75n8/QXTIkQ/k+4wDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw |
| MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK |
| AoIBAQCqlB1ljHkE8MnRPCN26T4syVLh/Lm/NY1m5DdmtUv/GpvLMOHUMFT7bvJD |
| /Xa4hFF5ElpllYfsPRmwqwSUZKq85b/id/0HKDy1INpVLHkE8nFuMbRjFIBOw4Me |
| 6n5awE1ISi6eUoCAmCIQSgXX2xOPN2cgYxkBkgdGlLXJuudorwZXNWlQUCIjC5Kh |
| mDIIiFyLTHylavMx7r9MWbChy+goHfpM0xvmKwMaT7WNk10YlceTwYtvVRc0F+nY |
| cEfITLJa+qeqZrejYhcKfCcV78K8W3p9iMcqRQzXO5F+csYwyxI5HqKKiDkw8FS0 |
| GW+2XugBYCwrJ8vlk0mruJ7wKebHAgMBAAGjgcswgcgwHQYDVR0OBBYEFLgWkofh |
| DLnlYcPapQURaljdeGWOMB8GA1UdIwQYMBaAFLgWkofhDLnlYcPapQURaljdeGWO |
| MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh |
| L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S |
| b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG |
| 9w0BAQsFAAOCAQEAPdK4j1cEztQbopToGyyqtEedwg1cXoUKzfqV2lslNDEZ1uPb |
| m0ruSnv4gBm8pC3a28LdJ3q7ubozTYjtsj3QPKjT79CO5ljMOmBNSLaPCYKHmoeQ |
| 4ucfuKlbcqs2pKpngmOhW0USCUtiyB2L0RviStkF6Tg826fXLVVRdiilRoyiOI1e |
| YCd0eiItLyoGdrtOPIIIAMqeQoFxVKT2UiERBB+6tcyVdLAT/24SCoBR1/Wxgcww |
| 3Cxs/xZuNN13xL+b1/oLfi+Eq2FYldUEjnqLrWkQ6deA2XQaMgn8azcaK0/T7Fvx |
| 6vkak4vJkgmlgNMR6nUIYVcha3TN5307whwR4w== |
| -----END CERTIFICATE----- |
