[Created by: generate-chains.py]

Certificate chain where the intermediate contains an unknown non-critical
extension.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0f:e8:d3:8e:fb:9a:03:b3:58:55:cb:3f:cf:6d:78:a5:26:b4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:b7:c7:2a:57:db:f0:c6:44:38:af:69:b5:
                    8a:33:9c:bf:ba:bf:19:8f:a4:96:5f:61:74:0c:3c:
                    95:c0:24:0a:a9:55:c9:3b:a3:1c:93:b3:d8:d8:40:
                    92:4f:c9:c0:9c:51:41:bb:ee:eb:ef:83:4b:d2:a5:
                    2f:da:74:90:bc:45:3a:62:7b:5a:e2:0e:9e:b3:83:
                    c2:8e:67:02:a2:4f:4b:8a:5b:33:19:16:3e:0f:f6:
                    01:f6:b6:c2:6c:17:8f:63:d2:91:3e:6a:2d:08:c8:
                    7c:51:f8:24:2f:dc:f7:74:24:0e:b6:9b:85:c8:2b:
                    82:81:0f:04:5f:d6:53:1e:53:2f:7e:1c:16:fc:3a:
                    77:f3:7f:51:1a:16:e0:7a:a4:05:89:d3:4a:9d:91:
                    03:db:a5:6d:6e:60:cb:f9:40:53:0f:5d:f8:b4:70:
                    23:5a:c7:ff:bf:45:1c:f1:21:8c:4a:9b:11:f7:8c:
                    df:9f:8a:94:be:2b:16:f1:9b:07:90:0d:ff:28:1c:
                    0e:4c:21:36:4e:18:86:50:2d:24:c0:d3:ce:f5:66:
                    a2:96:28:01:56:ba:97:d9:f9:fe:c6:0c:af:2f:34:
                    c3:b7:e1:b3:8a:85:3d:52:ef:fc:61:10:97:17:35:
                    95:fb:c8:e2:ae:49:1f:b4:8a:a7:70:76:b7:c7:df:
                    6b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                49:9D:A7:97:77:91:95:74:7C:01:DC:46:BB:A1:09:4F:19:65:53:D1
            X509v3 Authority Key Identifier: 
                keyid:07:F3:ED:92:2A:F7:2C:67:60:A8:EF:86:B2:9B:CC:97:5C:FA:CF:5A

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         be:73:bc:ed:53:55:01:cc:2a:cb:79:01:98:68:41:8f:b7:65:
         1e:ca:17:8c:d7:51:7f:2b:06:50:28:f9:26:29:94:b5:c1:a1:
         49:7a:d4:59:8d:53:23:41:0c:62:48:07:d1:d3:e5:18:24:13:
         b2:a4:da:ac:e0:d7:08:18:ac:20:89:f6:77:a5:c7:6f:8b:0e:
         6c:4f:4a:e0:ae:93:90:d6:9d:d5:bb:b2:6e:ba:08:f6:91:58:
         ba:eb:72:6b:22:d6:62:87:2b:77:d1:56:b1:12:1b:de:53:6c:
         8f:11:2a:94:a2:79:08:87:df:96:d7:2d:ab:05:d3:6e:fe:90:
         ee:a2:bf:7e:99:68:3d:9b:57:4d:18:75:58:21:96:77:f1:c8:
         c3:72:b3:8e:7f:4e:1c:1b:c2:bd:ad:e9:dd:62:a7:12:60:48:
         89:5f:8f:35:69:28:84:27:a7:a5:0f:74:08:34:60:fb:b5:cb:
         b3:85:79:af:27:90:9c:e9:90:d0:df:5d:eb:ac:ba:23:56:e5:
         cf:32:37:8c:98:2e:0c:6e:fb:01:ab:88:57:29:2f:09:49:d5:
         69:d4:d9:80:5e:98:19:40:48:d1:8c:ea:74:2d:20:4c:49:90:
         b8:be:dd:e7:e3:c5:64:42:86:4d:3f:cf:07:36:55:8a:57:de:
         e6:01:55:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7e:4d:0e:76:59:e5:dd:a7:55:bf:98:47:02:50:e5:71:03:33:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:61:13:ce:5c:97:1f:40:92:f1:86:de:28:
                    e0:4e:e8:70:01:3a:19:75:23:4f:bd:7b:ec:b6:45:
                    5f:aa:5e:2c:58:bd:ed:17:3c:ad:fc:74:4e:97:48:
                    71:a3:ce:04:90:0f:cf:78:62:89:58:18:66:c5:b7:
                    c9:a2:80:48:57:ee:64:a8:17:90:8c:e1:51:6d:a3:
                    79:21:d0:67:9f:82:ba:89:70:6e:54:32:67:e2:f5:
                    d7:8c:de:f8:6f:21:86:26:11:89:e7:7a:52:ab:25:
                    a4:e9:53:0d:01:58:04:a1:8e:ce:93:52:36:33:82:
                    17:6f:4c:cd:5c:9b:ee:42:96:2f:5c:ef:e4:c1:8b:
                    db:78:ad:af:e3:9f:b6:1c:be:f1:1d:36:9b:63:92:
                    37:be:ea:27:49:b7:7b:89:73:93:2c:b2:cb:bb:74:
                    d4:a6:c2:fe:08:ae:e8:bc:e3:40:a7:4d:97:db:14:
                    26:6b:c8:02:d3:95:4a:9b:7b:12:69:d3:3f:e9:88:
                    07:d7:49:26:6f:87:85:aa:0f:be:88:3c:a7:f0:9f:
                    7f:21:f0:96:35:26:71:f1:f9:33:3f:f8:c8:92:64:
                    c1:7a:6a:6b:52:a8:54:dc:88:5c:75:93:81:7f:4f:
                    cc:c5:cf:51:4b:87:ff:4e:3c:e2:76:08:2d:fc:4d:
                    cf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                07:F3:ED:92:2A:F7:2C:67:60:A8:EF:86:B2:9B:CC:97:5C:FA:CF:5A
            X509v3 Authority Key Identifier: 
                keyid:5E:73:41:09:27:46:17:12:6B:62:FF:2E:78:20:DE:7A:59:ED:29:84

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            1.2.3.4: 
                ....
    Signature Algorithm: sha256WithRSAEncryption
         a4:a1:64:6e:e5:a6:25:8b:2c:f2:58:c2:24:b6:c6:ad:e0:63:
         c3:48:bf:f6:e2:e1:9a:91:69:54:cf:05:a1:b1:23:e7:3c:ec:
         a2:cb:70:c1:d0:c8:59:b7:45:f8:ae:23:ed:de:39:df:2a:1c:
         a2:d8:df:d7:b0:7a:74:e9:64:94:71:fe:96:f7:90:09:69:5b:
         28:18:6b:d4:82:23:df:24:b1:a1:8e:7c:a0:1d:7c:2f:5a:dc:
         51:6b:ec:07:a2:2e:39:d7:66:ae:e4:8d:cb:50:19:5c:fa:c9:
         2e:77:f2:93:66:5d:15:1d:49:f2:51:a7:ff:4b:aa:52:75:c2:
         b5:24:df:ef:51:7c:21:c8:6f:cc:46:39:f7:a5:bf:79:27:18:
         c5:97:3d:14:74:a7:b6:5c:21:18:84:8e:06:36:f3:47:af:d4:
         42:75:eb:8c:b9:fc:4b:88:d9:e0:d9:67:43:a8:ab:d1:16:89:
         70:74:af:b5:2a:7d:13:3e:ee:64:91:e1:1e:58:bc:46:d9:57:
         30:e0:e2:9b:ad:8c:f6:6f:fc:45:8f:1e:72:78:df:19:7f:c7:
         93:2f:a3:5b:f4:b3:b1:60:e5:d8:08:a5:fa:1c:1f:54:39:a2:
         d3:35:a3:13:c8:3d:be:55:e4:fd:7d:04:87:8c:52:eb:c6:91:
         9f:21:06:0c
-----BEGIN CERTIFICATE-----
MIIDjTCCAnWgAwIBAgIUKX5NDnZZ5d2nVb+YRwJQ5XEDM3IwDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw
MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMlHYRPOXJcfQJLxht4o4E7ocAE6GXUjT7177LZFX6peLFi9
7Rc8rfx0TpdIcaPOBJAPz3hiiVgYZsW3yaKASFfuZKgXkIzhUW2jeSHQZ5+Cuolw
blQyZ+L114ze+G8hhiYRied6UqslpOlTDQFYBKGOzpNSNjOCF29MzVyb7kKWL1zv
5MGL23itr+Ofthy+8R02m2OSN77qJ0m3e4lzkyyyy7t01KbC/giu6LzjQKdNl9sU
JmvIAtOVSpt7EmnTP+mIB9dJJm+HhaoPvog8p/CffyHwljUmcfH5Mz/4yJJkwXpq
a1KoVNyIXHWTgX9PzMXPUUuH/0484nYILfxNzw8CAwEAAaOB2DCB1TAdBgNVHQ4E
FgQUB/Ptkir3LGdgqO+GspvMl1z6z1owHwYDVR0jBBgwFoAUXnNBCSdGFxJrYv8u
eCDeelntKYQwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs
LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m
b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/
MAsGAyoDBAQEAQIDBDANBgkqhkiG9w0BAQsFAAOCAQEApKFkbuWmJYss8ljCJLbG
reBjw0i/9uLhmpFpVM8FobEj5zzsostwwdDIWbdF+K4j7d453yocotjf17B6dOlk
lHH+lveQCWlbKBhr1IIj3ySxoY58oB18L1rcUWvsB6IuOddmruSNy1AZXPrJLnfy
k2ZdFR1J8lGn/0uqUnXCtSTf71F8IchvzEY596W/eScYxZc9FHSntlwhGISOBjbz
R6/UQnXrjLn8S4jZ4NlnQ6ir0RaJcHSvtSp9Ez7uZJHhHli8RtlXMODim62M9m/8
RY8ecnjfGX/Hky+jW/SzsWDl2Ail+hwfVDmi0zWjE8g9vlXk/X0Eh4xS68aRnyEG
DA==
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7e:4d:0e:76:59:e5:dd:a7:55:bf:98:47:02:50:e5:71:03:33:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d0:c9:04:2a:e3:2c:61:f5:b8:fe:95:cf:f0:4f:
                    49:3a:13:bf:16:40:fd:16:d5:31:53:5b:2c:16:94:
                    96:7b:63:43:b0:04:9f:0c:9f:f9:30:48:94:ad:03:
                    c7:84:48:a0:9e:eb:7a:a4:d7:09:f7:48:4d:1d:d8:
                    05:59:46:52:33:43:a7:6c:c1:66:b4:8e:5a:3e:8a:
                    5b:bc:18:09:ff:c3:5b:c2:d7:1f:00:e1:5d:85:b1:
                    b6:8b:aa:ac:7a:9e:30:37:d8:57:c6:d8:82:f5:23:
                    80:16:2b:ff:95:5b:dc:24:61:0b:0f:62:14:e8:dd:
                    ee:5c:30:86:6d:4e:e9:99:b5:61:d1:94:cf:4c:f9:
                    c4:92:be:22:59:2d:be:ca:2c:d3:8d:9f:8e:ea:d3:
                    88:dc:cd:69:21:18:64:d2:66:23:50:d4:ca:38:76:
                    09:3d:f5:cc:42:91:a2:12:f1:f4:cb:86:83:7c:0d:
                    87:f7:89:a7:eb:ff:99:19:c6:04:22:b5:05:18:ca:
                    04:60:d3:61:b8:b2:b1:64:cf:c4:15:af:a4:62:f6:
                    a1:c6:cc:f9:f9:3d:3e:25:7c:03:a6:a6:17:d6:43:
                    90:7d:d8:04:f6:27:c7:79:cf:c9:96:b4:b3:b7:0e:
                    0a:fc:c4:ea:b4:ce:7e:67:e7:21:33:92:cc:11:af:
                    f2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5E:73:41:09:27:46:17:12:6B:62:FF:2E:78:20:DE:7A:59:ED:29:84
            X509v3 Authority Key Identifier: 
                keyid:5E:73:41:09:27:46:17:12:6B:62:FF:2E:78:20:DE:7A:59:ED:29:84

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         25:ce:4c:07:e9:f4:41:e6:df:48:f4:b1:48:ec:8d:35:23:5a:
         78:bf:81:c1:17:a0:82:12:c8:7a:9c:1c:d7:75:65:1f:2e:de:
         00:db:be:fb:1c:4e:21:11:bf:ce:6d:e5:b4:6e:27:1b:48:c0:
         24:ef:3d:9f:78:09:e6:14:55:35:75:77:55:9a:b4:2f:b4:f1:
         b0:bd:42:22:6e:0f:b3:62:89:8a:1f:b4:78:63:d5:de:2a:b2:
         3d:d9:8c:1e:c2:fb:47:7b:77:29:6c:41:5b:22:d2:07:96:60:
         40:2b:dc:12:b5:de:90:23:0d:ce:06:bf:f3:36:7f:df:dd:09:
         7f:03:72:e6:fe:28:cf:21:b7:aa:8f:58:b6:86:ec:c7:e9:35:
         12:34:35:41:6b:34:1a:ba:41:0b:96:b0:eb:9f:0b:c7:af:4d:
         b9:79:43:c6:5b:4e:0d:39:5b:25:52:8d:68:63:dc:ba:92:f1:
         65:67:69:39:a2:1d:43:0b:d8:7e:f4:83:47:3e:ac:c9:9a:3c:
         cc:5f:44:d1:d4:83:6c:2f:44:67:5e:8a:5e:6f:0f:bf:01:d3:
         cc:5e:25:e7:b4:dc:21:4b:87:20:49:51:f4:42:01:bd:e9:81:
         9b:3a:80:67:a1:cd:1e:1d:7f:fb:0e:8c:b4:7f:d8:4a:06:7f:
         02:f3:e9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----