[Created by: generate-chains.py]

Certificate chain where the target certificate is a CA rather than an
end-entity certificate (based on the basic constraints extension).

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a4:86:6a:41:8e:28:fd:af:66:05:2a:fc:73:db:94:88:ab:21:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:4e:2d:c7:c9:c2:ab:e9:b7:ff:2f:3a:09:
                    f2:64:ea:bc:ea:9c:34:fa:39:c1:2d:c2:38:c3:51:
                    ec:7b:06:6e:21:c6:7b:a0:04:ec:e3:dd:5a:72:0a:
                    0f:bc:73:37:7f:01:7e:02:3d:d5:cb:7a:2d:cc:b3:
                    c7:d9:cb:44:0e:d6:a3:1d:dc:69:08:80:50:ce:2b:
                    9b:a3:8d:3f:4e:79:55:ea:cc:94:81:7a:9d:fc:54:
                    f5:15:9e:17:99:e2:30:9b:67:55:4c:79:cc:85:13:
                    ca:38:af:ec:df:a5:50:bc:b8:ff:0a:4e:12:be:5e:
                    de:64:d3:ac:7d:f5:cc:3f:9a:b5:94:32:75:65:8e:
                    47:b0:81:d7:c8:27:5f:7c:44:31:53:6d:93:36:6f:
                    54:99:dc:82:24:7c:ab:14:eb:67:2f:3b:10:a4:cb:
                    56:34:05:f4:b1:fc:12:42:dd:3c:dc:16:0f:d1:8f:
                    f0:87:fa:07:b4:fa:3d:7a:47:c0:dc:95:09:77:9c:
                    28:b3:a3:ae:9e:72:d3:bc:3b:a5:57:f7:31:3b:4f:
                    76:30:a2:43:56:74:f9:3b:7b:f7:ec:43:64:3e:56:
                    aa:93:53:d4:4a:5a:84:8b:fb:68:43:17:a4:20:13:
                    07:e0:aa:7f:b1:c3:36:15:8b:b3:ec:e2:e6:d6:4a:
                    5f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                93:E1:6A:2B:C0:A8:CA:CA:A9:B3:28:0E:8B:11:FF:0B:B0:24:73:F6
            X509v3 Authority Key Identifier: 
                keyid:9A:2E:6F:0B:96:F4:DF:5E:32:32:96:E5:03:2A:FA:DD:98:12:55:EE

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         71:31:b4:5a:4a:d1:c0:e6:ac:bf:1e:08:ea:a4:65:21:f2:ad:
         13:4a:4f:d3:dc:a3:ca:ee:fb:5b:d9:b4:65:de:ac:34:77:18:
         68:54:ef:71:d4:a3:63:fb:1e:12:88:1d:52:79:74:08:d7:f5:
         d6:7f:87:aa:bf:46:c1:75:75:9c:cf:8a:07:c8:14:a0:82:05:
         6b:4d:5d:c3:43:79:64:18:77:3f:88:3f:b8:eb:0c:4b:03:6a:
         93:0e:81:bd:bb:5d:50:10:61:bc:aa:be:9a:45:dc:e3:3d:43:
         a8:a0:06:32:f9:5d:8e:af:ae:f7:ce:b3:10:f1:52:8e:1c:de:
         92:07:43:9e:b7:b4:13:3a:11:9e:0b:96:6d:11:72:3a:f3:a8:
         59:b8:35:40:90:50:70:dc:db:ff:e5:76:74:04:db:df:2f:72:
         28:0b:28:53:e7:ce:52:f2:11:d4:12:d2:39:22:09:43:00:65:
         9d:af:da:a9:9d:75:97:ff:e1:b9:6e:87:c7:62:ec:6b:7c:27:
         67:f1:bb:f5:84:51:7c:7c:bc:df:24:52:77:c0:65:25:a1:cd:
         13:06:c5:4e:bf:84:cf:1c:d7:d0:d3:04:1d:1c:c5:94:f1:c2:
         8b:6f:8b:bf:93:c0:05:ae:94:c2:07:26:19:35:f6:80:95:b9:
         58:f0:e1:23
-----BEGIN CERTIFICATE-----
MIIDkjCCAnqgAwIBAgIUTaSGakGOKP2vZgUq/HPblIirIQgwDQYJKoZIhvcNAQEL
BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTE4MDMxMDEyMDAwMFoXDTIx
MDEwMTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEApUVOLcfJwqvpt/8vOgnyZOq86pw0+jnBLcI4w1HsewZu
IcZ7oATs491acgoPvHM3fwF+Aj3Vy3otzLPH2ctEDtajHdxpCIBQziubo40/TnlV
6syUgXqd/FT1FZ4XmeIwm2dVTHnMhRPKOK/s36VQvLj/Ck4Svl7eZNOsffXMP5q1
lDJ1ZY5HsIHXyCdffEQxU22TNm9UmdyCJHyrFOtnLzsQpMtWNAX0sfwSQt083BYP
0Y/wh/oHtPo9ekfA3JUJd5wos6OunnLTvDulV/cxO092MKJDVnT5O3v37ENkPlaq
k1PUSlqEi/toQxekIBMH4Kp/scM2FYuz7OLm1kpfgwIDAQABo4HbMIHYMB0GA1Ud
DgQWBBST4WorwKjKyqmzKA6LEf8LsCRz9jAfBgNVHSMEGDAWgBSaLm8LlvTfXjIy
luUDKvrdmBJV7jA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91
cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0
dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIB
BjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBxMbRaStHA5qy/
HgjqpGUh8q0TSk/T3KPK7vtb2bRl3qw0dxhoVO9x1KNj+x4SiB1SeXQI1/XWf4eq
v0bBdXWcz4oHyBSgggVrTV3DQ3lkGHc/iD+46wxLA2qTDoG9u11QEGG8qr6aRdzj
PUOooAYy+V2Or673zrMQ8VKOHN6SB0Oet7QTOhGeC5ZtEXI686hZuDVAkFBw3Nv/
5XZ0BNvfL3IoCyhT585S8hHUEtI5IglDAGWdr9qpnXWX/+G5bofHYuxrfCdn8bv1
hFF8fLzfJFJ3wGUloc0TBsVOv4TPHNfQ0wQdHMWU8cKLb4u/k8AFrpTCByYZNfaA
lblY8OEj
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c3:39:90:77:32:c2:7e:ea:1a:68:8b:35:f3:20:6c:3d:1d:57:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:35:8b:85:75:a2:74:1e:b4:bd:5c:9b:e2:
                    7a:87:32:a1:df:63:d4:5c:10:c8:3c:c2:7e:aa:53:
                    09:d8:fa:ce:14:bd:80:a7:b3:cb:4b:84:af:fc:c8:
                    de:97:38:d8:17:cd:1d:6a:65:39:b5:27:36:bc:64:
                    9a:4f:2d:91:5f:34:2b:f2:83:fa:2b:ea:1c:6e:5f:
                    60:09:c3:70:94:0f:bd:0c:eb:e2:a0:ba:43:5a:3a:
                    dd:3e:02:99:52:4a:28:e2:e4:dc:18:95:3a:bd:44:
                    6f:c1:a2:3e:6f:43:57:60:a4:70:17:ae:42:d1:9c:
                    7c:08:7f:f0:77:93:78:59:b2:c4:39:db:28:cd:19:
                    42:78:c5:00:a2:3a:6f:ef:57:a7:22:d5:87:6a:26:
                    c4:d1:9f:18:70:05:43:9c:72:a1:03:79:47:ba:f5:
                    64:f9:0f:63:c1:fe:70:3f:f0:5c:92:44:e6:71:88:
                    0e:ec:13:0c:45:33:93:b8:3c:c2:fe:07:7d:0e:b2:
                    bb:2f:19:69:d0:d1:9c:77:77:48:54:ca:5d:0f:8e:
                    6d:8d:27:37:61:45:12:de:22:6c:da:2f:23:9f:d1:
                    0f:38:03:75:b4:53:ba:81:17:4a:83:93:19:4b:56:
                    4e:31:63:12:6f:89:5c:5c:7b:1b:49:fc:6a:a0:8a:
                    54:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9A:2E:6F:0B:96:F4:DF:5E:32:32:96:E5:03:2A:FA:DD:98:12:55:EE
            X509v3 Authority Key Identifier: 
                keyid:19:FB:52:2E:B1:D7:76:19:DB:8B:05:83:BE:62:CA:0B:48:6E:75:0E

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         47:da:b9:b1:46:0f:28:e2:1d:10:22:3b:e2:fe:98:35:f1:5e:
         71:e5:10:60:33:1a:42:19:14:11:d2:ca:a4:8b:da:97:ac:64:
         6c:b9:54:77:99:9a:01:1b:e0:c8:b6:7a:36:a9:58:f1:01:97:
         d8:d2:1b:46:3b:90:5b:ba:c8:7c:c9:81:ef:49:2f:63:02:3c:
         a1:49:ee:92:29:a1:b9:9f:d2:54:31:80:37:4a:ad:c4:82:f3:
         73:40:cd:58:c0:ad:bb:5a:f6:46:5a:56:14:e7:28:6f:b3:40:
         d7:fc:c6:22:52:17:bd:94:cb:9b:f2:91:50:d5:71:c0:66:ca:
         b5:4b:55:6d:d6:19:f1:ed:aa:0b:91:7a:d5:77:5b:8a:07:d8:
         69:24:ab:ac:bf:12:7d:00:e0:f7:5d:35:44:2d:43:80:13:ed:
         85:e2:57:dd:75:82:17:1f:a0:63:6a:0e:3e:03:2a:4b:d1:32:
         8d:c0:6e:e6:aa:86:07:b4:0b:20:a1:1c:f2:b8:7d:ed:e7:cb:
         31:88:85:ca:42:98:0e:f4:da:04:73:6e:0e:c3:04:af:f7:e4:
         d3:fc:21:89:b4:93:97:b0:32:b9:11:42:6c:1e:e6:cf:4f:b5:
         97:32:3a:fc:25:58:5c:7a:0b:10:5c:ed:79:e4:62:91:ab:85:
         78:c2:d0:83
-----BEGIN CERTIFICATE-----
MIIDgDCCAmigAwIBAgIUHsM5kHcywn7qGmiLNfMgbD0dV2UwDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw
MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALKUNYuFdaJ0HrS9XJvieocyod9j1FwQyDzCfqpTCdj6zhS9
gKezy0uEr/zI3pc42BfNHWplObUnNrxkmk8tkV80K/KD+ivqHG5fYAnDcJQPvQzr
4qC6Q1o63T4CmVJKKOLk3BiVOr1Eb8GiPm9DV2CkcBeuQtGcfAh/8HeTeFmyxDnb
KM0ZQnjFAKI6b+9XpyLVh2omxNGfGHAFQ5xyoQN5R7r1ZPkPY8H+cD/wXJJE5nGI
DuwTDEUzk7g8wv4HfQ6yuy8ZadDRnHd3SFTKXQ+ObY0nN2FFEt4ibNovI5/RDzgD
dbRTuoEXSoOTGUtWTjFjEm+JXFx7G0n8aqCKVI0CAwEAAaOByzCByDAdBgNVHQ4E
FgQUmi5vC5b0314yMpblAyr63ZgSVe4wHwYDVR0jBBgwFoAUGftSLrHXdhnbiwWD
vmLKC0hudQ4wNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs
LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m
b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/
MA0GCSqGSIb3DQEBCwUAA4IBAQBH2rmxRg8o4h0QIjvi/pg18V5x5RBgMxpCGRQR
0sqki9qXrGRsuVR3mZoBG+DItno2qVjxAZfY0htGO5Bbush8yYHvSS9jAjyhSe6S
KaG5n9JUMYA3Sq3EgvNzQM1YwK27WvZGWlYU5yhvs0DX/MYiUhe9lMub8pFQ1XHA
Zsq1S1Vt1hnx7aoLkXrVd1uKB9hpJKusvxJ9AOD3XTVELUOAE+2F4lfddYIXH6Bj
ag4+AypL0TKNwG7mqoYHtAsgoRzyuH3t58sxiIXKQpgO9NoEc24OwwSv9+TT/CGJ
tJOXsDK5EUJsHubPT7WXMjr8JVhcegsQXO155GKRq4V4wtCD
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c3:39:90:77:32:c2:7e:ea:1a:68:8b:35:f3:20:6c:3d:1d:57:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:00:37:2d:30:07:b1:79:ce:1c:2f:e5:de:
                    14:66:f0:c4:c9:65:94:d5:d8:86:9b:f8:3e:fa:8f:
                    2a:f6:45:59:3f:2b:e2:ca:27:da:e1:63:8b:cd:3d:
                    9d:f7:9c:fd:a8:c0:34:87:d3:7a:ff:50:a2:43:8c:
                    96:db:d7:a9:43:bd:e9:f9:ac:f2:6c:85:e7:46:33:
                    4b:4b:32:2f:62:fb:86:5e:f7:70:74:24:b7:a7:9b:
                    f5:1c:ba:d2:06:93:d4:2c:7e:94:de:64:d4:df:a5:
                    d7:07:f0:57:32:76:e8:d8:dc:10:37:54:24:73:34:
                    1d:7f:fe:8a:5f:21:40:b4:cd:aa:ab:a6:ea:9b:f3:
                    6e:eb:45:0f:52:f2:0b:aa:5f:0c:bd:69:b4:bc:c5:
                    ba:eb:36:29:07:62:9c:f1:26:59:89:04:b7:87:c6:
                    5b:9e:e9:93:af:81:f2:29:21:8a:fc:99:93:2d:d9:
                    8a:0e:5a:43:b1:d8:31:42:e3:70:ab:5d:ed:7c:bc:
                    08:71:27:e9:8f:f2:ac:09:12:be:28:91:31:c7:89:
                    a4:e3:0a:07:e5:c0:f4:6c:fa:53:4f:1f:71:3a:42:
                    c7:b3:25:56:fc:69:ce:98:99:d6:fa:b4:e2:3d:c7:
                    4c:b8:f2:a9:c7:39:3e:dd:60:e6:06:dd:68:f9:ec:
                    55:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                19:FB:52:2E:B1:D7:76:19:DB:8B:05:83:BE:62:CA:0B:48:6E:75:0E
            X509v3 Authority Key Identifier: 
                keyid:19:FB:52:2E:B1:D7:76:19:DB:8B:05:83:BE:62:CA:0B:48:6E:75:0E

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         75:da:ff:52:cf:8f:d9:32:b5:7f:2e:5c:c7:cc:35:c7:4e:ea:
         65:9d:6d:d4:2a:8d:f7:c9:d7:8d:e9:f4:8f:a6:5f:d6:b0:61:
         20:c0:6f:b9:7a:6a:3d:0f:98:e6:c0:6c:7e:f7:b5:3b:62:97:
         0a:8d:85:91:ab:8b:d4:73:a3:55:f9:d1:38:86:ff:91:fc:1b:
         f5:ef:b9:8f:f0:e5:15:8f:63:f6:14:e3:46:c8:75:17:ec:22:
         f4:a6:e8:e1:5f:a6:8c:48:c4:ec:ac:16:e9:77:66:16:1a:c7:
         c0:29:a9:ac:a6:66:64:62:51:78:f1:71:b4:cd:33:1c:6d:34:
         9b:b8:21:17:9f:d0:b4:7b:5e:a3:a3:6f:db:50:bf:dd:df:9a:
         01:82:90:c4:41:66:4c:f1:48:c0:94:11:89:0e:fd:bf:0c:16:
         37:58:13:4b:95:46:81:ab:29:0a:6b:7c:f9:bb:14:1c:9d:0c:
         ad:cb:55:ed:6d:ac:b2:f5:83:f0:45:f2:ca:2f:f6:03:9f:d1:
         04:af:06:d9:9d:e9:f3:c5:15:5f:52:45:cd:6e:cf:a7:19:81:
         35:47:db:b7:4e:6a:7e:ba:75:a9:9d:e7:ed:57:f3:e7:26:cf:
         ee:b8:b7:d9:dc:23:f2:d5:a8:24:ad:ad:ad:49:00:dd:8b:e7:
         81:fe:4d:b4
-----BEGIN CERTIFICATE-----
MIIDeDCCAmCgAwIBAgIUHsM5kHcywn7qGmiLNfMgbD0dV2QwDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw
MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNzwA3LTAHsXnOHC/l3hRm8MTJZZTV2Iab+D76jyr2RVk/K+LKJ9rhY4vN
PZ33nP2owDSH03r/UKJDjJbb16lDven5rPJshedGM0tLMi9i+4Ze93B0JLenm/Uc
utIGk9QsfpTeZNTfpdcH8FcydujY3BA3VCRzNB1//opfIUC0zaqrpuqb827rRQ9S
8guqXwy9abS8xbrrNikHYpzxJlmJBLeHxlue6ZOvgfIpIYr8mZMt2YoOWkOx2DFC
43CrXe18vAhxJ+mP8qwJEr4okTHHiaTjCgflwPRs+lNPH3E6QsezJVb8ac6Ymdb6
tOI9x0y48qnHOT7dYOYG3Wj57FU7AgMBAAGjgcswgcgwHQYDVR0OBBYEFBn7Ui6x
13YZ24sFg75iygtIbnUOMB8GA1UdIwQYMBaAFBn7Ui6x13YZ24sFg75iygtIbnUO
MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh
L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S
b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG
9w0BAQsFAAOCAQEAddr/Us+P2TK1fy5cx8w1x07qZZ1t1CqN98nXjen0j6Zf1rBh
IMBvuXpqPQ+Y5sBsfve1O2KXCo2FkauL1HOjVfnROIb/kfwb9e+5j/DlFY9j9hTj
Rsh1F+wi9Kbo4V+mjEjE7KwW6XdmFhrHwCmprKZmZGJRePFxtM0zHG00m7ghF5/Q
tHteo6Nv21C/3d+aAYKQxEFmTPFIwJQRiQ79vwwWN1gTS5VGgaspCmt8+bsUHJ0M
rctV7W2ssvWD8EXyyi/2A5/RBK8G2Z3p88UVX1JFzW7PpxmBNUfbt05qfrp1qZ3n
7Vfz5ybP7ri32dwj8tWoJK2trUkA3Yvngf5NtA==
-----END CERTIFICATE-----