[Created by: generate-chains.py]

Certificate chain where the intermediate has an unknown critical
extension.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:54:1e:c7:2c:6e:fe:21:b3:a1:00:b5:73:46:4d:6e:2f:ca:28:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e4:56:5a:78:c6:79:63:15:7a:a6:5b:ac:09:02:
                    26:d7:10:40:e3:ea:55:dc:1c:86:37:cd:9a:0c:7d:
                    6c:5a:1f:d0:58:25:72:48:c5:7f:ae:7c:eb:9c:a6:
                    e8:45:7c:f5:00:36:16:a9:00:f9:8e:8a:df:70:2c:
                    bb:30:6c:74:6a:c7:30:69:a5:2c:1d:77:3f:b0:fa:
                    89:e0:cb:07:39:ac:08:59:aa:4c:63:cc:62:fa:a9:
                    8c:19:27:61:2d:0d:97:98:ad:50:b8:b9:e2:5a:21:
                    c1:70:cd:e7:2a:ad:6a:68:1f:52:bc:8c:80:f5:51:
                    a6:f1:3f:47:c7:50:81:27:e5:15:37:48:4f:4b:c3:
                    1b:e9:01:b9:97:56:8b:b9:56:38:62:d0:c5:ca:52:
                    21:6b:2d:42:03:7a:d9:83:d3:cd:57:b4:8c:ca:a5:
                    91:bf:3f:e2:26:df:85:e6:6c:2c:80:56:26:21:95:
                    be:cf:a4:85:cf:5e:e4:18:05:e7:68:99:91:67:6d:
                    e3:16:92:c9:df:9f:89:3f:ae:ee:ee:a8:43:69:f6:
                    6b:92:5d:72:6b:bd:53:1c:4e:25:23:4f:ee:5a:ab:
                    3f:ba:01:42:94:02:db:cb:59:93:bb:b9:2a:ea:ad:
                    5a:17:26:84:67:99:05:98:f0:b1:3c:e0:a4:2b:17:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F7:35:7C:CD:CE:17:42:80:4E:A2:57:94:36:6B:2A:70:19:25:20:CD
            X509v3 Authority Key Identifier: 
                keyid:B7:0A:76:64:C2:EB:6F:75:8D:EE:42:82:82:B5:AE:9C:7B:B8:23:29

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         31:b7:e4:a6:ce:66:ec:6e:ba:83:97:b9:6b:39:05:ff:ab:1c:
         2d:0f:f0:de:cd:ee:f5:bf:c7:1e:bf:a3:9c:f9:9b:f7:ee:dd:
         a8:c8:cc:63:0c:68:9a:d3:5f:34:6b:a6:76:c8:fb:ba:64:ba:
         4c:85:8f:b2:4e:75:ed:65:5c:67:a7:be:43:bb:29:dd:c9:2e:
         a4:51:ff:c1:e9:40:fe:c1:f3:f2:8e:9d:49:68:a1:f1:02:47:
         b5:f1:cb:ec:86:a8:87:7e:3b:f4:f1:5b:7a:4e:90:a9:d4:54:
         ab:0f:f8:e0:55:be:32:ef:15:68:24:3e:6b:e9:0c:b0:4c:ca:
         31:fc:aa:56:27:7f:16:12:c5:db:5d:75:12:be:5a:16:74:36:
         5f:90:60:e8:c1:0a:fc:96:74:76:b9:08:a1:8f:c4:91:3d:cb:
         63:0b:b7:b8:68:bd:10:dc:65:fe:4e:ca:09:b1:31:d4:17:60:
         b5:21:c9:fa:70:2a:77:34:ac:fa:69:6d:f4:b9:00:79:08:5d:
         42:e6:71:5d:b8:0c:0b:00:97:bd:80:e3:20:5d:98:b3:64:90:
         a4:6d:c6:f9:0f:6f:b5:9e:6c:8e:4a:0c:6a:ea:bc:73:29:35:
         78:a3:55:f1:d2:58:f4:fd:99:04:7d:ad:a7:aa:26:91:91:62:
         ed:df:1e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:03:de:56:53:4d:df:53:72:dc:6d:7a:68:da:5e:9a:7a:fb:e3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:af:53:c1:dc:ae:32:12:ba:12:d0:12:d6:5e:18:
                    4a:ca:26:ef:e5:b8:b4:b0:9e:f0:6f:99:7d:d7:f5:
                    c5:2c:e3:3a:d0:61:35:51:a0:ea:eb:76:02:27:9a:
                    7e:19:b7:3f:9c:09:ee:e9:5d:60:64:82:19:94:74:
                    a2:b6:04:6b:ba:dd:51:c2:33:6c:9a:b9:eb:91:b9:
                    3a:07:6d:9e:36:3e:17:b7:38:27:1e:11:1e:06:35:
                    50:4c:02:11:48:17:28:87:14:0f:d7:28:65:4f:12:
                    80:da:4f:74:36:63:de:50:97:2e:68:dc:82:bb:f1:
                    c0:6a:60:34:1f:86:2d:61:13:0e:39:9e:14:d8:ba:
                    df:55:8d:bb:7b:38:77:85:d8:37:52:97:20:c2:12:
                    01:f0:e1:40:25:70:76:f4:89:5f:50:15:77:f9:74:
                    e9:53:e0:31:b8:e0:a7:f1:22:72:76:b1:07:13:b5:
                    e9:a8:f5:bf:29:0f:1f:95:bd:a1:79:74:56:7e:ba:
                    28:18:aa:20:8a:af:7b:ae:cc:cd:55:b2:8b:b4:f3:
                    5e:f2:bf:2e:09:9b:6a:b8:26:bf:79:58:c4:ca:2f:
                    fa:e0:28:7d:f7:85:71:c3:c2:03:b0:47:b9:11:d5:
                    4f:dc:5c:31:78:06:0b:06:09:bc:ae:95:0d:ee:71:
                    02:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B7:0A:76:64:C2:EB:6F:75:8D:EE:42:82:82:B5:AE:9C:7B:B8:23:29
            X509v3 Authority Key Identifier: 
                keyid:79:19:7C:D6:62:7D:B4:D8:E8:6E:7C:D3:E9:C7:2F:3D:F2:B2:40:A3

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            1.2.3.4: critical
                ....
    Signature Algorithm: sha256WithRSAEncryption
         03:39:2f:d1:32:c8:6a:0d:0a:cb:e7:e5:62:a8:74:50:51:ae:
         39:75:8d:08:c3:81:98:28:ea:4d:0d:e5:d2:81:5d:c0:9c:1f:
         a0:e5:df:f7:b7:99:6e:ea:53:1f:0e:20:c2:71:df:c9:c0:28:
         35:c9:fe:be:01:a6:04:c4:5a:e9:0d:04:fb:3b:ff:bb:2b:63:
         95:41:2c:10:ef:08:b9:fa:5e:5d:be:2c:b1:22:5d:19:dc:8e:
         36:d7:2f:8f:de:6e:d2:4d:dc:90:11:7a:24:c5:64:40:43:52:
         ef:fb:1d:d1:83:4d:d3:2f:5b:f9:75:be:63:d0:08:28:4c:02:
         01:aa:4b:02:b5:da:cd:73:bd:88:29:fb:e4:a9:9f:3e:f0:55:
         4f:36:7d:76:02:ae:bd:8a:2a:6c:c9:84:92:a1:97:31:d2:70:
         bd:3d:1d:36:f7:45:5c:9d:9f:15:88:fe:12:2c:c4:5c:e5:40:
         5e:a9:6f:2c:60:37:9c:bd:66:f4:6e:09:5f:7b:a4:48:51:b2:
         04:fc:de:04:98:2a:27:60:fb:2c:48:5d:3f:74:ec:dd:0f:25:
         7b:dd:e6:d2:58:c5:6c:65:d8:e9:eb:56:85:6f:00:e6:25:c3:
         c4:c5:c3:ea:af:13:bc:c4:0c:a3:c0:6f:b5:b2:be:6b:f9:25:
         17:99:0e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:03:de:56:53:4d:df:53:72:dc:6d:7a:68:da:5e:9a:7a:fb:e3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:26:50:c5:ac:e1:7e:b7:9d:20:24:3c:b5:
                    5d:00:3e:9e:20:03:93:41:ed:70:e7:cc:a7:8f:67:
                    48:1c:79:41:b4:e1:e3:7c:e6:35:31:74:43:61:cc:
                    7a:2d:15:b3:1c:fe:a1:75:1e:82:6e:39:30:10:39:
                    7c:c2:a3:84:ea:99:b6:9e:3f:ce:41:46:9f:43:03:
                    d0:8a:0a:b4:fb:e7:ec:05:b7:73:1f:c5:06:85:0d:
                    13:41:d5:f8:3b:b8:f0:65:2e:93:88:9f:c1:f8:81:
                    dc:c7:38:50:cb:fe:c6:cb:dd:6d:39:c4:4e:40:9a:
                    64:4f:a7:72:fc:98:cd:b9:4b:32:99:0e:0f:33:2e:
                    b6:2e:80:f2:e4:51:bb:14:e4:67:43:54:2f:a8:1e:
                    c3:4b:4f:4c:dd:4a:df:84:1e:e9:e7:50:bf:83:2e:
                    a6:38:a6:c9:d8:60:98:94:b6:5c:4b:1e:80:c4:39:
                    32:11:5e:ae:4d:c4:ac:10:be:cd:fe:a3:9c:38:2e:
                    55:be:0f:92:cb:06:87:d0:a3:d4:f8:a2:e7:ca:05:
                    c0:41:91:a4:b9:93:da:fd:38:3f:ce:c2:45:2b:06:
                    da:d4:91:53:e8:8e:c2:c3:39:c1:c6:dd:ff:41:fa:
                    94:66:c3:c9:ee:6a:e2:91:ac:ad:42:5e:7a:d4:8a:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                79:19:7C:D6:62:7D:B4:D8:E8:6E:7C:D3:E9:C7:2F:3D:F2:B2:40:A3
            X509v3 Authority Key Identifier: 
                keyid:79:19:7C:D6:62:7D:B4:D8:E8:6E:7C:D3:E9:C7:2F:3D:F2:B2:40:A3

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         c4:df:c9:25:6d:1d:32:e1:10:2a:94:2a:34:73:9e:5d:03:65:
         a5:71:74:e7:bf:66:68:3e:d1:41:8f:e9:91:a7:e1:4a:61:3a:
         07:45:ed:1d:c4:c4:37:a8:f3:00:fa:19:9d:a5:05:29:22:9b:
         04:f7:26:c7:b4:86:8c:65:58:7a:20:24:cd:e3:2c:9b:41:f3:
         bf:d8:45:7a:be:1b:e4:e3:a2:4b:bf:a8:82:a7:ce:31:15:fc:
         a0:a6:a9:26:29:fc:4c:83:1f:42:dd:14:f7:90:a8:6a:6c:60:
         16:45:82:51:bc:bf:59:9d:18:6f:25:6e:1e:13:d1:aa:45:0d:
         d6:90:85:2f:82:fd:e9:ed:95:d6:db:03:ea:83:05:29:66:cc:
         8c:c2:f8:2c:d4:ea:a1:a4:bb:b1:37:59:f8:4d:09:1e:aa:16:
         37:70:55:ea:0c:6a:2a:73:d6:52:97:af:58:fa:fd:24:91:38:
         d2:9d:43:e7:5e:ce:fa:6f:3b:f7:68:c6:25:6f:c5:1f:98:cd:
         79:a0:26:c1:3c:9e:dc:20:31:68:55:47:6d:63:d7:57:92:ae:
         7f:4f:38:b8:06:0b:78:36:36:51:87:b2:9b:c9:61:e3:a0:d8:
         b9:38:c1:88:0e:7f:d1:07:cf:64:23:27:c1:5c:0b:16:72:36:
         ce:0f:b0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----