[Created by: generate-chains.py]

Certificate chain where the intermediate has a policies extension (not
marked as critical) which contains an unknown policy qualifer (1.2.3.4).

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:6a:f9:bd:60:f3:6d:85:80:16:84:85:c0:6e:f2:0e:9a:01:52:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:c3:94:6a:c2:d7:1b:b4:33:1a:29:0d:ca:
                    48:e2:f1:94:93:27:36:71:c1:a2:dc:67:0e:5d:67:
                    b0:a9:08:9c:67:08:ba:d9:74:5f:01:62:5d:7f:2a:
                    bb:32:ed:0c:af:c8:5a:b5:02:24:45:6f:90:4c:83:
                    ab:0e:30:19:c2:df:bc:d5:25:99:b0:f3:5e:e1:27:
                    5b:06:2f:ca:3e:d6:49:fb:87:8d:d3:fd:b9:b9:27:
                    80:be:b5:88:72:3b:1b:20:3f:04:69:04:89:66:ee:
                    20:f7:c2:90:c1:27:aa:29:fa:88:ff:2f:10:3b:81:
                    cf:d0:b9:e9:a7:84:dc:f1:a7:d0:49:e0:6e:17:b2:
                    ba:09:ed:be:9c:a3:f2:66:37:dd:20:98:43:31:bd:
                    02:d1:55:63:88:f6:55:13:20:b7:b9:0b:c9:c9:fb:
                    a3:5b:0f:90:56:e8:8a:dc:a5:7a:92:bc:46:5d:82:
                    a4:e1:42:2c:7c:76:65:63:87:f4:e0:5a:cf:15:22:
                    13:49:1d:aa:0d:ea:25:08:7c:63:19:39:2f:1d:15:
                    2e:7c:9a:e7:d5:03:21:76:6c:22:1a:be:12:8b:72:
                    c5:cb:0f:41:ef:0f:d3:be:78:1d:12:e0:c2:29:eb:
                    d7:36:28:54:ad:8d:ce:c8:79:2f:4f:13:c1:2b:3b:
                    e4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FE:3D:1B:76:A0:3D:EE:69:00:5B:D4:61:90:68:18:E3:29:EC:66:A3
            X509v3 Authority Key Identifier: 
                keyid:49:F0:C4:09:BE:16:68:CF:0A:C1:E0:EF:8F:A6:34:1F:94:63:6F:E6

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         6f:3f:fa:25:c9:63:f2:c1:e6:27:f4:15:93:99:0b:ad:07:cd:
         5b:e9:0e:73:79:9d:49:34:d8:0f:ae:b5:e3:c1:17:08:a4:d6:
         6f:0f:c4:80:cb:1e:27:45:8c:df:17:dc:dc:22:60:8c:d6:da:
         33:f9:39:a7:8e:79:1d:54:fc:6f:24:33:77:93:21:70:b1:18:
         09:b1:c7:8c:7e:ee:6e:c6:77:fc:ba:f2:3a:82:64:d8:d4:72:
         de:b6:ad:6a:bd:67:9c:bb:39:ec:f5:98:bc:26:4c:0f:f8:e3:
         de:c5:9e:06:3c:69:42:43:c1:e4:91:ba:eb:d4:14:c2:9d:eb:
         d2:16:92:e0:8b:5a:79:50:be:05:16:39:3f:42:ed:3e:b8:33:
         8a:bf:09:0a:b0:fc:48:e0:54:b2:67:3a:d6:ea:fe:df:df:64:
         4d:61:4b:09:e8:41:3a:44:b8:e8:38:c1:43:31:43:79:98:c2:
         4c:a3:b0:50:de:6f:a8:fd:7d:50:b6:3f:c8:09:b9:08:17:8b:
         4b:9d:ba:ad:12:24:b1:8e:04:e1:10:54:8b:e1:ea:3a:8a:12:
         14:13:8c:a7:3c:82:70:97:05:0f:bf:3b:16:7d:bd:bb:6d:e8:
         04:78:c6:aa:18:8f:2f:bd:29:97:4b:38:eb:f4:fc:45:11:dc:
         41:5c:d5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:97:5a:9c:80:bc:38:51:fe:e9:06:6c:9c:24:16:bd:7b:49:b2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d9:74:6c:03:22:ab:05:1b:af:d1:34:43:ac:2a:
                    a3:bd:5d:dc:13:39:5f:df:ff:f4:bd:3c:bd:56:1e:
                    b5:e9:b2:19:1d:49:ff:9c:5a:31:9c:20:74:87:27:
                    81:22:50:a3:c2:90:da:48:da:c2:cd:4a:4d:dd:ec:
                    75:d7:61:5b:32:57:1e:1d:63:82:54:69:49:f1:ff:
                    3e:a5:67:46:b2:77:73:61:ce:30:9c:d5:f7:36:1f:
                    83:0e:12:f8:37:48:a9:36:e6:38:61:13:5a:1d:a7:
                    70:17:d2:0d:81:87:f0:cf:02:3c:13:56:fc:e9:79:
                    96:c0:6d:8a:5d:a7:ad:e7:c5:3f:09:28:aa:e9:a8:
                    6b:23:a3:78:fe:34:11:ba:d0:12:59:cf:b3:8a:68:
                    df:96:2f:44:b0:b9:72:54:cf:ba:1b:2c:8c:56:a4:
                    9d:db:b8:55:72:42:04:13:77:cc:75:04:3d:e9:b1:
                    fa:a4:19:1b:3d:6f:0a:c2:7a:48:37:8b:35:c6:e1:
                    cc:c6:50:b5:45:c0:f2:30:ca:ff:df:75:af:4b:c3:
                    c7:63:11:da:fb:54:bf:53:57:a0:ce:75:18:53:8e:
                    c7:49:c3:4a:79:88:a4:1d:34:a4:e0:d2:f4:63:ca:
                    5a:02:89:c3:94:a3:38:32:f6:3b:e1:06:e4:02:e4:
                    d0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                49:F0:C4:09:BE:16:68:CF:0A:C1:E0:EF:8F:A6:34:1F:94:63:6F:E6
            X509v3 Authority Key Identifier: 
                keyid:27:0D:D0:55:88:5D:DE:1C:37:96:A0:62:14:C2:19:3C:C6:A4:1F:D1

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies: 
                Policy: 1.2.3
                    Unknown Qualifier: 1.2.3.4

    Signature Algorithm: sha256WithRSAEncryption
         85:18:d1:0f:47:88:6e:c2:73:be:b3:46:b4:4e:7e:84:ee:c9:
         04:fb:f8:ad:45:b6:10:16:0c:3c:ff:7c:14:98:55:f4:6e:22:
         b1:57:34:40:92:94:24:3c:4c:5c:b8:ab:95:2c:74:c0:f3:e7:
         f2:16:b1:00:28:f6:a8:41:c2:b9:85:84:27:c5:59:54:c9:3e:
         1d:3a:f5:21:22:72:10:9d:5c:6d:68:f7:3c:11:69:c4:54:0d:
         1c:83:47:4b:a2:a2:7d:68:c3:f9:18:85:93:41:8c:96:d5:59:
         8a:42:10:d6:92:63:83:bf:78:00:16:85:ab:ce:8d:07:28:ff:
         13:50:ba:d4:a7:b1:be:c3:25:99:93:0a:82:6c:24:02:61:29:
         26:45:7c:8a:57:7c:1e:12:74:fd:cd:d2:07:30:74:cd:a1:45:
         cd:6e:07:f2:bc:45:24:ba:24:05:4a:07:50:94:c3:21:91:67:
         44:ad:63:a5:e5:fe:ab:a6:78:6a:f1:fb:50:2b:1a:86:f8:70:
         6f:6b:7c:d2:78:29:ff:7b:81:5a:cd:51:ca:a2:62:00:12:03:
         ee:9f:e3:2a:e5:62:2f:25:55:43:a8:16:db:a2:d8:f1:54:42:
         40:a8:ea:b7:cf:ce:cb:b6:cc:7f:1e:aa:4e:84:6e:44:3f:c4:
         0d:4a:c8:8c
-----BEGIN CERTIFICATE-----
MIIDnjCCAoagAwIBAgIUGpdanIC8OFH+6QZsnCQWvXtJskIwDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw
MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANl0bAMiqwUbr9E0Q6wqo71d3BM5X9//9L08vVYetemyGR1J
/5xaMZwgdIcngSJQo8KQ2kjaws1KTd3sdddhWzJXHh1jglRpSfH/PqVnRrJ3c2HO
MJzV9zYfgw4S+DdIqTbmOGETWh2ncBfSDYGH8M8CPBNW/Ol5lsBtil2nrefFPwko
qumoayOjeP40EbrQElnPs4po35YvRLC5clTPuhssjFakndu4VXJCBBN3zHUEPemx
+qQZGz1vCsJ6SDeLNcbhzMZQtUXA8jDK/991r0vDx2MR2vtUv1NXoM51GFOOx0nD
SnmIpB00pODS9GPKWgKJw5SjODL2O+EG5ALk0CUCAwEAAaOB6TCB5jAdBgNVHQ4E
FgQUSfDECb4WaM8KweDvj6Y0H5Rjb+YwHwYDVR0jBBgwFoAUJw3QVYhd3hw3lqBi
FMIZPMakH9EwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs
LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m
b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/
MBwGA1UdIAQVMBMwEQYCKgMwCzAJBgMqAwQMAmhpMA0GCSqGSIb3DQEBCwUAA4IB
AQCFGNEPR4huwnO+s0a0Tn6E7skE+/itRbYQFgw8/3wUmFX0biKxVzRAkpQkPExc
uKuVLHTA8+fyFrEAKPaoQcK5hYQnxVlUyT4dOvUhInIQnVxtaPc8EWnEVA0cg0dL
oqJ9aMP5GIWTQYyW1VmKQhDWkmODv3gAFoWrzo0HKP8TULrUp7G+wyWZkwqCbCQC
YSkmRXyKV3weEnT9zdIHMHTNoUXNbgfyvEUkuiQFSgdQlMMhkWdErWOl5f6rpnhq
8ftQKxqG+HBva3zSeCn/e4FazVHKomIAEgPun+Mq5WIvJVVDqBbbotjxVEJAqOq3
z87Ltsx/HqpOhG5EP8QNSsiM
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:97:5a:9c:80:bc:38:51:fe:e9:06:6c:9c:24:16:bd:7b:49:b2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:c1:fa:93:42:7b:bf:e5:1e:21:e2:f5:cd:
                    db:f7:61:04:6e:ea:06:4c:fc:d5:2e:9f:5e:6e:97:
                    b2:d4:c3:f1:4c:18:01:5e:3e:85:e2:c0:73:ce:56:
                    fb:cc:4c:4e:f0:37:b5:e0:c6:31:5c:c0:06:5a:90:
                    24:d8:5d:88:ab:e3:53:2b:12:90:0b:16:c6:db:19:
                    74:e7:29:63:53:d9:5b:f3:e7:80:8c:5e:86:ff:e8:
                    e3:72:6b:09:6c:64:6b:92:34:f2:9c:bd:f4:b7:c1:
                    31:6f:74:00:31:3a:45:70:9f:5d:a5:d3:9c:91:7f:
                    fb:87:95:ef:07:f3:8d:8e:c9:a5:cb:ed:cc:2d:23:
                    bf:e4:98:93:88:8d:be:bc:50:02:2c:3a:0d:52:53:
                    7e:9a:20:04:da:52:db:a4:e5:72:bc:d6:40:40:7f:
                    51:86:29:d7:f5:f7:db:85:b3:a0:7d:7a:c5:04:3e:
                    e9:73:ca:65:3c:13:91:46:a1:b4:fb:6b:8b:a0:5e:
                    7c:c9:9d:3c:5e:c5:f6:2a:99:df:2e:13:1e:7d:d8:
                    db:30:02:52:d7:94:16:93:b8:20:5d:77:4d:26:6e:
                    9c:c8:5e:0a:56:ad:ba:d9:26:c0:80:dd:66:aa:09:
                    09:18:41:fa:f2:5c:7f:ae:10:45:25:ba:cc:0d:5d:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                27:0D:D0:55:88:5D:DE:1C:37:96:A0:62:14:C2:19:3C:C6:A4:1F:D1
            X509v3 Authority Key Identifier: 
                keyid:27:0D:D0:55:88:5D:DE:1C:37:96:A0:62:14:C2:19:3C:C6:A4:1F:D1

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         23:c6:54:c3:ec:7a:07:fb:72:00:e2:7f:96:79:9c:d1:fb:7d:
         b9:0b:99:a6:85:7d:1b:b4:12:6e:78:77:f9:c2:77:52:ab:b2:
         cc:16:ce:d2:41:80:3b:48:95:8f:4e:dc:8b:75:72:11:90:b9:
         15:6e:58:a6:4b:77:25:83:4e:46:82:21:af:14:81:a9:9c:66:
         50:05:b1:d1:67:07:35:9e:7e:6d:5e:0e:bb:97:51:ad:89:87:
         dd:26:d0:bf:3f:e1:32:96:e1:da:7b:bf:e7:8b:0c:2f:8a:db:
         1e:94:d4:37:e5:67:bf:c2:65:50:60:ec:e1:6f:b8:1d:d9:f7:
         31:3a:d4:cb:06:89:73:96:55:d0:4a:69:90:d8:e2:01:59:d7:
         87:e5:1d:0b:4c:1e:78:d3:0a:39:fa:9a:ce:a5:91:b9:f4:38:
         6a:f0:19:29:fd:4f:05:3b:61:4c:1e:ad:72:4e:86:b4:f6:bb:
         b7:f9:92:c9:8f:51:7f:70:40:91:a4:ae:e6:28:29:35:6c:a4:
         25:23:5a:3f:09:00:af:f7:cc:b9:fe:74:5d:e3:52:0e:80:db:
         4a:d5:15:af:05:84:02:d5:a8:cf:3e:16:53:db:eb:3a:06:52:
         3d:66:ac:6f:fd:42:8a:92:d9:5b:03:90:92:c3:2d:38:98:2b:
         a5:5e:25:23
-----BEGIN CERTIFICATE-----
MIIDeDCCAmCgAwIBAgIUGpdanIC8OFH+6QZsnCQWvXtJskEwDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw
MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCg+cH6k0J7v+UeIeL1zdv3YQRu6gZM/NUun15ul7LUw/FMGAFePoXiwHPO
VvvMTE7wN7XgxjFcwAZakCTYXYir41MrEpALFsbbGXTnKWNT2Vvz54CMXob/6ONy
awlsZGuSNPKcvfS3wTFvdAAxOkVwn12l05yRf/uHle8H842OyaXL7cwtI7/kmJOI
jb68UAIsOg1SU36aIATaUtuk5XK81kBAf1GGKdf199uFs6B9esUEPulzymU8E5FG
obT7a4ugXnzJnTxexfYqmd8uEx592NswAlLXlBaTuCBdd00mbpzIXgpWrbrZJsCA
3WaqCQkYQfryXH+uEEUluswNXdg7AgMBAAGjgcswgcgwHQYDVR0OBBYEFCcN0FWI
Xd4cN5agYhTCGTzGpB/RMB8GA1UdIwQYMBaAFCcN0FWIXd4cN5agYhTCGTzGpB/R
MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh
L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S
b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG
9w0BAQsFAAOCAQEAI8ZUw+x6B/tyAOJ/lnmc0ft9uQuZpoV9G7QSbnh3+cJ3Uquy
zBbO0kGAO0iVj07ci3VyEZC5FW5Ypkt3JYNORoIhrxSBqZxmUAWx0WcHNZ5+bV4O
u5dRrYmH3SbQvz/hMpbh2nu/54sML4rbHpTUN+Vnv8JlUGDs4W+4Hdn3MTrUywaJ
c5ZV0EppkNjiAVnXh+UdC0weeNMKOfqazqWRufQ4avAZKf1PBTthTB6tck6GtPa7
t/mSyY9Rf3BAkaSu5igpNWykJSNaPwkAr/fMuf50XeNSDoDbStUVrwWEAtWozz4W
U9vrOgZSPWasb/1CipLZWwOQksMtOJgrpV4lIw==
-----END CERTIFICATE-----