[Created by: generate-chains.py]

Generates certificate chains where the intermediate contains netscape server
gated crypto rather than serverAuth.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b5:13:fb:79:d7:bf:0c:f5:4b:2a:50:4c:9a:68:d0:89:a0:f2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c8:af:a5:d9:15:56:dd:ec:b1:41:dd:34:36:48:
                    ab:5a:3f:2e:6a:14:16:38:1f:c2:ad:27:64:f2:72:
                    54:a1:81:73:9c:fd:3a:37:2c:64:f9:e2:0a:bd:0f:
                    74:9a:70:ea:9c:6e:c9:64:e9:92:a4:bf:9a:30:2c:
                    9a:8f:4c:eb:12:1e:58:08:f5:6a:4b:72:e0:a8:a9:
                    22:81:ca:cd:7c:78:cd:24:9b:90:8a:7d:ac:79:cf:
                    40:a9:d0:f6:a4:78:ef:fd:c3:b3:9d:d3:ea:51:ee:
                    c7:ed:f5:2b:36:5c:50:11:be:44:a9:29:cd:d6:79:
                    bc:bd:5b:a5:46:d1:a7:86:a5:86:2a:73:f5:ba:f9:
                    f4:5e:9c:94:9e:95:81:ec:42:f9:83:f1:4e:a6:eb:
                    c9:a1:3c:e9:97:80:cb:ee:4d:06:45:75:a7:38:db:
                    f2:a9:17:12:46:f1:99:1f:40:48:89:a0:bd:07:46:
                    a5:ab:11:03:fb:a5:2c:a2:c9:bc:f7:07:e5:9f:ce:
                    24:26:3e:a1:a8:ac:fe:ad:09:64:00:d9:da:3c:c8:
                    09:c3:bc:c7:64:b9:93:c2:b9:39:4e:3c:a0:7c:9c:
                    14:fc:e5:bd:1f:1e:fc:4d:e8:e5:aa:9d:ff:33:ed:
                    f7:10:0e:72:da:81:79:e9:1e:f3:65:03:b0:13:77:
                    30:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                63:59:54:71:BD:5B:C7:56:B3:FE:AE:DA:EF:DE:59:E2:60:69:B3:2C
            X509v3 Authority Key Identifier: 
                keyid:34:04:CA:F4:40:13:44:0C:86:E8:1F:47:3F:F0:E8:23:D6:EE:02:09

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:test.example
    Signature Algorithm: sha256WithRSAEncryption
         43:e9:0f:15:58:35:43:c3:61:00:9a:60:9d:ba:a0:d5:28:b7:
         52:2e:22:ce:48:5c:30:22:f3:a6:76:83:cf:b0:2a:3b:49:7c:
         b7:fb:71:32:3c:e7:5c:06:e3:5d:cb:5e:38:e9:8a:de:ac:eb:
         79:f7:69:46:ca:a8:fa:ef:90:1a:1a:b2:32:fd:9b:cc:75:e8:
         d6:5c:e1:25:41:ad:c6:cc:18:c6:29:06:39:8f:0a:07:a6:94:
         61:46:4b:8e:cd:26:dd:b2:7e:e6:2f:22:7c:38:70:9c:fe:30:
         ee:2a:a1:b7:28:b1:0e:7e:15:78:21:c6:6c:9b:24:f5:16:18:
         f2:c7:33:97:88:6b:03:21:1a:7d:b1:3b:c6:ac:25:72:12:79:
         43:3b:d0:99:2d:9e:ae:9c:5f:e5:0e:02:0f:52:f9:68:81:7d:
         75:e4:e9:38:f8:d7:ab:e3:e0:0c:1b:44:7f:b6:21:8d:46:da:
         bb:e1:64:81:55:d9:02:00:be:1a:9a:2e:df:5b:80:0f:72:de:
         09:d4:a4:49:e5:5c:02:15:c5:e3:07:92:84:cf:e5:9c:53:c8:
         d4:ce:bb:a0:dd:dd:33:ba:1d:18:6a:b7:a2:45:24:ad:0e:23:
         3e:f2:cb:6d:3a:9c:7b:4c:da:fb:93:82:e6:26:6c:3b:b3:24:
         15:8f:5c:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e0:1e:36:75:40:12:16:19:8d:07:a8:3f:9b:ff:e1:59:bc:6a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9a:21:10:93:91:7b:75:0d:a8:b0:51:a1:b8:2c:
                    87:b9:1c:9f:63:63:7a:f5:03:a3:89:4c:5e:b5:03:
                    e9:50:32:c2:e2:30:68:9e:16:ec:ee:70:15:74:47:
                    0f:cd:ea:5d:61:28:1d:0b:3f:37:39:83:ae:f0:64:
                    05:83:15:e6:2d:cb:e9:69:1d:98:bd:3a:cf:25:f6:
                    21:a2:cf:e8:57:ac:bb:97:32:66:51:bb:c3:3f:4c:
                    f9:e8:ac:27:30:00:e5:e3:f5:64:f1:e4:f2:79:93:
                    6a:56:f6:99:28:81:f2:23:13:ac:97:e2:39:d0:80:
                    91:8e:f2:c5:30:cd:46:71:3c:88:ca:03:b5:74:a2:
                    dc:db:e1:ae:70:2a:42:b1:99:b8:d5:48:60:2f:1e:
                    da:d3:1f:27:8b:6c:12:40:3d:5d:eb:0d:e8:f0:e3:
                    f0:4a:8b:cd:74:62:e8:06:44:ca:d8:5e:2a:6d:09:
                    4d:7b:8e:47:1c:04:12:da:ea:e5:6f:6c:41:2c:23:
                    1d:39:83:d0:44:a5:7c:c6:13:0e:6c:73:2a:06:71:
                    4f:65:ba:b1:5e:db:d3:ec:ca:ae:40:5e:24:87:63:
                    2d:ae:4b:d5:f6:4c:25:fc:3f:d9:6e:96:65:c8:b2:
                    8b:1a:a3:ed:33:b4:3a:f3:cc:4a:c5:fc:66:81:3f:
                    89:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                34:04:CA:F4:40:13:44:0C:86:E8:1F:47:3F:F0:E8:23:D6:EE:02:09
            X509v3 Authority Key Identifier: 
                keyid:4E:42:54:6A:32:D3:BE:9E:70:41:47:41:3E:90:BA:86:3F:D4:FD:6C

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Extended Key Usage: 
                Netscape Server Gated Crypto
    Signature Algorithm: sha256WithRSAEncryption
         7f:e2:ea:6e:14:1d:04:11:db:3d:38:33:06:35:a2:b9:59:76:
         2f:ce:57:b6:71:23:01:d0:ab:dc:de:b6:43:97:13:bb:f1:a4:
         d6:f3:83:48:dc:b3:bb:5b:ed:bb:42:cd:80:30:2a:84:da:7e:
         87:0b:b5:d9:c9:1f:bf:3a:2a:66:35:a4:77:0c:cb:32:98:d7:
         d3:e8:bb:72:7d:f5:78:f2:1b:62:57:8e:20:d0:aa:bb:f5:45:
         4a:2d:60:68:05:17:69:22:9f:60:75:0b:c9:28:79:c9:98:e0:
         6a:a9:8c:8a:35:4c:8d:d3:7f:81:25:fa:2c:4d:e5:43:84:58:
         86:50:08:95:d7:2b:23:43:22:f8:26:65:43:ad:2f:d9:f2:37:
         20:cb:cf:8f:f4:b9:cc:db:c8:00:05:81:8e:87:2d:81:9d:85:
         92:7d:0a:ad:91:31:ad:5b:0b:09:ff:36:ec:e7:eb:6f:35:a3:
         67:0c:ce:a4:6a:f5:12:6b:7c:41:a8:50:fd:5d:d9:10:37:96:
         a6:b9:f4:9b:69:8e:d1:8b:88:90:69:c4:ad:79:a2:5b:4e:fb:
         e2:97:06:bf:0c:9a:36:47:53:09:f4:e0:d5:07:67:b1:b9:50:
         69:c4:0d:3c:cc:dc:69:6f:da:12:c0:2c:e4:30:a6:ca:57:c7:
         fb:11:ef:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e0:1e:36:75:40:12:16:19:8d:07:a8:3f:9b:ff:e1:59:bc:6a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e2:b0:53:05:80:84:a4:62:d7:02:96:95:55:ad:
                    63:c9:cd:d7:46:41:1a:cb:b7:0d:6c:70:75:05:e6:
                    ea:a8:f6:64:dd:9e:b8:f7:a3:da:05:50:14:ad:0b:
                    fd:1f:8d:7f:d0:03:ce:ec:7d:de:f3:5e:eb:8b:f0:
                    db:98:70:cc:c2:c0:a9:f7:2c:e7:27:04:a5:79:10:
                    47:6d:a7:80:22:ba:0e:0b:28:e5:2a:f1:69:14:a2:
                    dd:a4:a8:ac:67:76:a0:db:8b:78:c0:0b:7e:2c:9c:
                    65:f6:e5:40:b7:c0:ca:b3:f0:1e:74:69:77:45:38:
                    e1:8c:de:c9:1f:fc:67:28:ee:22:ae:4d:3d:8c:6b:
                    63:62:9f:bf:ef:67:7d:e6:ee:a4:d7:41:c2:62:c5:
                    f2:3c:49:af:f9:44:74:b4:a7:26:f8:bd:ed:57:ec:
                    ed:16:2c:42:77:3d:85:69:e8:48:7e:d7:70:05:21:
                    b9:15:96:0b:5a:5d:ac:ee:64:46:1b:4c:eb:58:b0:
                    fd:48:fe:c1:02:e7:d0:c0:0b:52:aa:e7:51:9c:93:
                    91:46:05:ed:23:2e:c3:0b:0e:50:0e:6e:38:ac:31:
                    69:7d:70:d2:40:dd:7d:41:3e:08:31:78:c6:e3:57:
                    1d:c5:53:e7:91:6d:de:bc:de:3f:2e:72:de:e2:a0:
                    63:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4E:42:54:6A:32:D3:BE:9E:70:41:47:41:3E:90:BA:86:3F:D4:FD:6C
            X509v3 Authority Key Identifier: 
                keyid:4E:42:54:6A:32:D3:BE:9E:70:41:47:41:3E:90:BA:86:3F:D4:FD:6C

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         73:95:fc:25:76:e5:1f:f2:9f:7d:12:fa:a3:ab:eb:ac:1f:7c:
         77:20:f5:d9:cc:4c:d9:a5:b4:5a:ce:41:33:a8:7f:33:93:97:
         aa:ba:6a:f8:95:a2:54:f0:09:c0:56:bf:2c:91:22:b1:87:26:
         03:08:3e:a8:53:64:3b:f8:ff:a0:67:e1:62:28:22:73:c2:a1:
         ed:5e:62:a6:05:ba:c0:dd:4b:5c:a0:88:f6:1e:54:f4:7d:85:
         fb:02:d6:cd:32:2c:0c:a9:cd:f1:ac:26:ff:15:30:f5:fc:48:
         7a:f7:bf:69:b0:ce:36:32:e4:2b:1d:9b:7d:1c:8c:aa:e2:17:
         a3:e4:30:26:14:9a:18:91:07:f2:85:90:cf:8c:32:9c:56:e4:
         2c:99:e8:29:04:5a:b7:b5:84:2e:cd:df:b4:b5:0e:8c:1e:75:
         d2:45:d3:3a:40:97:78:f2:96:3e:57:05:fb:e0:b5:24:48:25:
         6b:ef:00:99:70:8b:6a:ae:11:28:5e:fc:08:fc:3d:08:ef:e1:
         f8:c5:4b:c1:7b:3e:44:dd:3c:1f:26:00:18:f0:e8:9e:60:1c:
         34:6b:ab:83:22:28:50:9f:a9:1d:bd:b1:16:b7:4b:f1:38:07:
         92:43:0d:a9:63:42:0f:34:73:04:98:73:be:66:dc:1d:f1:03:
         64:6b:24:a4
-----BEGIN CERTIFICATE-----
MIIDeDCCAmCgAwIBAgIUQuAeNnVAEhYZjQeoP5v/4Vm8ap8wDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw
MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDisFMFgISkYtcClpVVrWPJzddGQRrLtw1scHUF5uqo9mTdnrj3o9oFUBSt
C/0fjX/QA87sfd7zXuuL8NuYcMzCwKn3LOcnBKV5EEdtp4Aiug4LKOUq8WkUot2k
qKxndqDbi3jAC34snGX25UC3wMqz8B50aXdFOOGM3skf/Gco7iKuTT2Ma2Nin7/v
Z33m7qTXQcJixfI8Sa/5RHS0pyb4ve1X7O0WLEJ3PYVp6Eh+13AFIbkVlgtaXazu
ZEYbTOtYsP1I/sEC59DAC1Kq51Gck5FGBe0jLsMLDlAObjisMWl9cNJA3X1BPggx
eMbjVx3FU+eRbd683j8uct7ioGMLAgMBAAGjgcswgcgwHQYDVR0OBBYEFE5CVGoy
076ecEFHQT6QuoY/1P1sMB8GA1UdIwQYMBaAFE5CVGoy076ecEFHQT6QuoY/1P1s
MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh
L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S
b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG
9w0BAQsFAAOCAQEAc5X8JXblH/KffRL6o6vrrB98dyD12cxM2aW0Ws5BM6h/M5OX
qrpq+JWiVPAJwFa/LJEisYcmAwg+qFNkO/j/oGfhYigic8Kh7V5ipgW6wN1LXKCI
9h5U9H2F+wLWzTIsDKnN8awm/xUw9fxIeve/abDONjLkKx2bfRyMquIXo+QwJhSa
GJEH8oWQz4wynFbkLJnoKQRat7WELs3ftLUOjB510kXTOkCXePKWPlcF++C1JEgl
a+8AmXCLaq4RKF78CPw9CO/h+MVLwXs+RN08HyYAGPDonmAcNGurgyIoUJ+pHb2x
FrdL8TgHkkMNqWNCDzRzBJhzvmbcHfEDZGskpA==
-----END CERTIFICATE-----