[Created by: generate-chains.py]

Certificate chain where the intermediate lacks a keyUsage extension.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ac:3f:b9:36:25:f6:73:c5:c7:47:1c:6a:5c:69:4c:10:a5:76:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c7:f3:c9:3b:b8:fb:d0:c6:d9:9d:7e:a6:0c:37:
                    fb:1e:e7:a9:ec:90:b1:a2:06:2a:b0:f1:d3:81:53:
                    8c:86:ea:c3:80:04:18:04:26:b0:70:4f:6b:7c:6b:
                    5f:31:b8:8d:e7:8a:93:a1:9d:69:20:a9:5e:0a:13:
                    a1:a1:c7:7b:e9:e4:bf:d1:67:50:e4:7a:e4:db:00:
                    a6:cb:f6:2c:a8:47:9d:7b:9a:6e:69:86:06:a2:0d:
                    ad:68:86:67:ff:da:0e:a1:ae:30:57:28:27:15:f3:
                    8b:b6:e2:3e:c8:30:26:6e:f4:05:ec:eb:b5:bc:cb:
                    37:bc:5d:db:c2:6a:f8:4f:e5:7f:b8:f2:62:aa:59:
                    3b:40:ce:40:67:7d:83:bb:66:20:a5:73:82:7e:40:
                    ce:87:ae:3d:36:dc:06:26:09:c9:3e:6b:13:ed:c8:
                    44:ee:cf:f3:db:38:a1:ee:cd:02:94:18:7f:c6:d7:
                    78:65:8d:34:bb:a3:d4:c5:27:e1:b9:b5:67:ad:fb:
                    3c:ce:9a:3d:f6:c7:54:2e:7b:fa:f8:89:e9:56:2b:
                    e9:78:2e:02:14:2b:1a:18:e4:ce:f7:80:67:f7:0f:
                    88:bc:78:70:8f:1c:d5:3f:22:3b:38:22:51:d8:fd:
                    6d:93:de:05:0c:1c:a8:b7:b1:d3:a9:83:6b:8b:10:
                    ad:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C5:A1:CF:17:29:4F:62:DA:B7:74:71:6F:6A:89:D9:DE:45:66:A7:E4
            X509v3 Authority Key Identifier: 
                keyid:4C:E2:EE:E5:DC:2B:D0:74:49:43:BA:6D:6B:91:6F:A3:C0:53:89:92

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         93:3b:24:5f:d0:1a:c1:4a:c8:56:19:50:e1:80:f3:b8:05:e5:
         0f:e9:88:c5:98:0a:7f:ca:33:84:27:d1:d7:a8:8c:20:87:44:
         89:86:9c:dc:da:a8:2d:dd:f3:2e:31:61:00:b1:58:51:70:94:
         ac:2a:59:ab:c9:a1:bf:52:cc:7b:bf:ea:24:ef:b4:25:28:10:
         03:93:ad:5a:90:a5:de:bb:7d:ed:55:20:e8:23:b0:69:c8:38:
         8a:33:ac:ab:f2:0f:d0:cd:75:26:d2:9a:8d:da:ac:20:27:fe:
         b1:c0:a4:02:84:1f:94:0e:fc:d7:26:79:9a:8a:c1:2c:e8:d8:
         aa:bd:ea:b0:c1:76:f3:7d:c9:90:43:9a:44:a6:6c:46:53:e8:
         40:a9:63:fd:9b:b7:35:07:3a:c2:4c:ce:98:ae:ab:0a:a9:bd:
         d1:f7:77:b8:ee:03:f6:7b:b6:e4:cf:e0:a4:b9:4d:99:5d:60:
         34:d9:2e:5f:52:0c:70:49:c2:31:8f:67:23:26:02:19:a1:dd:
         90:44:4d:20:bc:6f:e9:24:b4:87:00:e0:ac:10:9b:38:71:d7:
         88:36:5c:4a:61:9e:fe:c2:67:df:4f:34:4e:5f:f3:ae:5c:b8:
         4d:e0:d0:10:b5:4f:a2:19:f1:92:0a:b1:96:7c:23:e8:01:b1:
         1f:b3:70:1f
-----BEGIN CERTIFICATE-----
MIIDoDCCAoigAwIBAgIUU6w/uTYl9nPFx0ccalxpTBCldu4wDQYJKoZIhvcNAQEL
BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTE4MDMxMDEyMDAwMFoXDTIx
MDEwMTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAx/PJO7j70MbZnX6mDDf7Huep7JCxogYqsPHTgVOMhurD
gAQYBCawcE9rfGtfMbiN54qToZ1pIKleChOhocd76eS/0WdQ5Hrk2wCmy/YsqEed
e5puaYYGog2taIZn/9oOoa4wVygnFfOLtuI+yDAmbvQF7Ou1vMs3vF3bwmr4T+V/
uPJiqlk7QM5AZ32Du2YgpXOCfkDOh649NtwGJgnJPmsT7chE7s/z2zih7s0ClBh/
xtd4ZY00u6PUxSfhubVnrfs8zpo99sdULnv6+InpVivpeC4CFCsaGOTO94Bn9w+I
vHhwjxzVPyI7OCJR2P1tk94FDByot7HTqYNrixCtYQIDAQABo4HpMIHmMB0GA1Ud
DgQWBBTFoc8XKU9i2rd0cW9qidneRWan5DAfBgNVHSMEGDAWgBRM4u7l3CvQdElD
um1rkW+jwFOJkjA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91
cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0
dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD
ggEBAJM7JF/QGsFKyFYZUOGA87gF5Q/piMWYCn/KM4Qn0deojCCHRImGnNzaqC3d
8y4xYQCxWFFwlKwqWavJob9SzHu/6iTvtCUoEAOTrVqQpd67fe1VIOgjsGnIOIoz
rKvyD9DNdSbSmo3arCAn/rHApAKEH5QO/NcmeZqKwSzo2Kq96rDBdvN9yZBDmkSm
bEZT6ECpY/2btzUHOsJMzpiuqwqpvdH3d7juA/Z7tuTP4KS5TZldYDTZLl9SDHBJ
wjGPZyMmAhmh3ZBETSC8b+kktIcA4KwQmzhx14g2XEphnv7CZ99PNE5f865cuE3g
0BC1T6IZ8ZIKsZZ8I+gBsR+zcB8=
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:25:c9:a3:e4:54:8c:35:15:0b:cc:cf:a5:a6:2b:fd:97:e9:d0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:c0:66:3d:c7:72:ee:18:23:d7:56:80:3c:
                    b2:c2:57:81:a3:74:9c:05:07:e7:1a:70:ba:0c:08:
                    fc:14:db:52:16:03:2b:90:bb:01:1a:61:65:52:19:
                    8a:9b:08:2e:ed:00:29:31:a3:8a:7b:30:32:89:cb:
                    3d:4e:1e:a2:4c:f6:21:ff:5e:02:9c:7f:7a:e0:0d:
                    1c:cb:d7:e9:ee:9e:64:3f:b3:ca:17:79:c1:36:9d:
                    51:87:06:2d:c1:f4:28:f2:8b:49:a9:d2:12:89:b4:
                    60:60:65:00:6f:09:83:f8:95:94:ca:8c:70:2d:1d:
                    e0:7b:42:fc:53:4b:40:8c:d3:67:a1:2c:0a:c7:53:
                    8a:af:31:91:5b:12:cd:4b:d0:19:11:22:cc:82:94:
                    10:89:f0:b2:ae:f0:11:6e:91:bb:a5:77:89:c9:fd:
                    37:ea:b0:09:9a:7a:bf:7b:e9:d5:f5:56:13:af:b3:
                    d9:3f:c4:90:5a:b1:ed:ee:de:6f:86:16:61:f6:2d:
                    15:c9:6e:94:f2:72:58:e7:5e:ab:f1:2a:42:b1:6c:
                    c7:cd:fd:b1:2d:48:e0:b3:c4:09:e6:bd:e1:f9:3b:
                    1b:a5:5c:dc:0d:b9:40:2d:55:af:70:b2:01:cf:83:
                    35:85:4f:b4:a9:fc:33:f3:3c:f7:30:0c:c0:c5:22:
                    05:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4C:E2:EE:E5:DC:2B:D0:74:49:43:BA:6D:6B:91:6F:A3:C0:53:89:92
            X509v3 Authority Key Identifier: 
                keyid:CC:94:41:CF:A9:F7:C7:58:7C:37:E3:C5:37:29:9B:12:B3:DF:D5:3B

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         0c:ce:81:08:2b:b9:b2:8e:a0:9b:6b:9f:db:28:c8:fa:14:c5:
         d4:ed:4c:4a:58:a5:e0:0b:52:40:48:e8:e9:25:0b:9e:0e:b4:
         15:89:ad:19:b4:2e:16:d5:5c:17:35:18:94:aa:1e:f5:4e:30:
         89:9d:d0:ab:28:5c:27:88:08:73:3d:7c:38:c3:a8:9d:c3:d8:
         0e:50:61:ff:28:f4:75:df:2d:ef:f4:d2:e7:78:0f:65:15:55:
         ab:4f:95:40:e1:72:e3:54:d1:4a:8a:b5:6f:b4:78:51:4d:a3:
         26:5a:e7:07:74:60:78:79:fc:5b:c0:07:0c:14:d7:8b:71:73:
         28:33:0b:29:c8:c3:f6:95:e7:e5:e7:6f:89:99:f3:35:60:ea:
         5e:e0:87:36:1f:cb:8e:af:27:bf:e9:e4:65:47:2e:af:4c:cb:
         4c:72:4a:1f:48:e8:b6:89:b5:4a:da:9d:25:c6:6d:90:c9:9e:
         2b:5f:1f:a2:94:70:50:dd:9b:60:bb:73:8e:ed:3a:8a:7c:e9:
         99:49:9f:09:f2:5a:41:8f:8d:f6:5c:ba:c9:00:d9:77:29:02:
         fd:61:46:a4:e7:8e:f9:1e:53:51:14:45:08:65:64:33:83:70:
         35:04:52:a1:f5:49:cb:42:9f:32:b0:c8:eb:de:51:83:13:97:
         2f:78:91:0e
-----BEGIN CERTIFICATE-----
MIIDgDCCAmigAwIBAgIUDSXJo+RUjDUVC8zPpaYr/Zfp0N4wDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw
MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMlcwGY9x3LuGCPXVoA8ssJXgaN0nAUH5xpwugwI/BTbUhYD
K5C7ARphZVIZipsILu0AKTGjinswMonLPU4eokz2If9eApx/euANHMvX6e6eZD+z
yhd5wTadUYcGLcH0KPKLSanSEom0YGBlAG8Jg/iVlMqMcC0d4HtC/FNLQIzTZ6Es
CsdTiq8xkVsSzUvQGREizIKUEInwsq7wEW6Ru6V3icn9N+qwCZp6v3vp1fVWE6+z
2T/EkFqx7e7eb4YWYfYtFclulPJyWOdeq/EqQrFsx839sS1I4LPECea94fk7G6Vc
3A25QC1Vr3CyAc+DNYVPtKn8M/M89zAMwMUiBYUCAwEAAaOByzCByDAdBgNVHQ4E
FgQUTOLu5dwr0HRJQ7pta5Fvo8BTiZIwHwYDVR0jBBgwFoAUzJRBz6n3x1h8N+PF
NymbErPf1TswNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs
LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m
b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIFoDAPBgNVHRMBAf8EBTADAQH/
MA0GCSqGSIb3DQEBCwUAA4IBAQAMzoEIK7myjqCba5/bKMj6FMXU7UxKWKXgC1JA
SOjpJQueDrQVia0ZtC4W1VwXNRiUqh71TjCJndCrKFwniAhzPXw4w6idw9gOUGH/
KPR13y3v9NLneA9lFVWrT5VA4XLjVNFKirVvtHhRTaMmWucHdGB4efxbwAcMFNeL
cXMoMwspyMP2lefl52+JmfM1YOpe4Ic2H8uOrye/6eRlRy6vTMtMckofSOi2ibVK
2p0lxm2QyZ4rXx+ilHBQ3Ztgu3OO7TqKfOmZSZ8J8lpBj432XLrJANl3KQL9YUak
5475HlNRFEUIZWQzg3A1BFKh9UnLQp8ysMjr3lGDE5cveJEO
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:25:c9:a3:e4:54:8c:35:15:0b:cc:cf:a5:a6:2b:fd:97:e9:d0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:41:ee:d5:da:d2:45:d6:49:60:20:14:fb:
                    2c:a9:de:97:50:8e:1c:2f:82:c0:f5:ad:ae:58:ca:
                    46:cb:e5:cc:19:4f:e3:4f:15:7f:41:d4:b7:34:f3:
                    3d:da:86:6d:1a:d0:ab:f0:76:82:ea:a5:db:fb:c2:
                    e3:56:ac:4a:f0:33:57:d5:82:9e:72:db:2c:36:a3:
                    1b:d9:b1:e6:27:1c:98:7e:42:37:b6:21:bd:5a:18:
                    61:bc:6f:77:d7:0c:07:13:39:70:a1:46:08:9f:12:
                    05:c9:ac:a4:57:78:b5:8f:bc:6d:ca:b2:b0:24:ff:
                    fd:9c:61:9f:28:2f:7e:bb:d2:e3:2a:81:ed:f5:b7:
                    84:c9:be:fa:04:3c:29:e8:1f:ca:68:44:08:27:e3:
                    fc:ba:ce:74:19:59:c5:cd:9e:cb:a3:4a:e5:0f:d9:
                    78:38:b4:8c:c8:5f:a6:93:48:13:83:cc:a9:d2:60:
                    45:61:0d:00:22:84:88:ea:e3:dd:da:f0:05:c8:09:
                    3a:b2:3e:5b:6e:3e:c6:18:47:ff:18:54:b6:c0:6e:
                    fc:df:75:4b:2f:23:30:a1:8e:e2:4b:8b:63:fc:80:
                    83:62:eb:c9:a5:fe:ed:26:37:ad:59:ef:79:6a:2d:
                    67:d6:f9:5c:88:5e:19:62:05:55:9a:26:e5:61:b3:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CC:94:41:CF:A9:F7:C7:58:7C:37:E3:C5:37:29:9B:12:B3:DF:D5:3B
            X509v3 Authority Key Identifier: 
                keyid:CC:94:41:CF:A9:F7:C7:58:7C:37:E3:C5:37:29:9B:12:B3:DF:D5:3B

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         5c:eb:d4:94:eb:1f:6d:0d:5e:6b:e1:79:77:99:e0:8f:92:ec:
         66:00:09:cd:36:be:fa:e7:18:fe:b3:34:16:5e:3a:0f:18:cb:
         d2:e1:a4:6f:21:2c:24:08:85:13:5e:de:0d:e9:a8:20:e5:5b:
         65:d7:02:72:b5:12:8e:49:7d:06:13:7a:a1:56:4a:ff:f6:bc:
         d6:13:4f:df:cb:0f:35:80:3c:ce:f6:d2:6a:fc:83:0f:58:35:
         e4:3f:8b:77:d1:20:38:24:71:37:37:1f:f7:ce:c9:65:2c:1e:
         f3:65:6a:77:6b:1b:90:a2:22:59:5b:75:7d:d1:09:df:5a:f4:
         01:dc:00:a9:90:a9:0c:9e:9d:7d:3a:18:02:04:ab:10:cd:01:
         21:13:02:6d:b1:51:d9:09:52:e1:c6:9e:d2:60:5b:91:75:d7:
         85:89:b0:30:5e:ac:33:b1:42:b4:b8:72:50:eb:16:11:98:e0:
         6c:c7:6a:8d:76:21:76:29:ae:ec:50:f3:14:ef:a8:65:ef:57:
         2b:4f:e6:20:5c:97:a2:dc:d8:8c:df:7f:ba:c5:0d:94:37:18:
         7d:e3:2b:a8:32:da:e2:13:d5:8d:65:94:01:a4:a0:25:82:a2:
         56:82:52:ef:21:1f:65:a6:67:a6:70:3c:80:40:b7:0a:ea:11:
         02:89:6e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----