[Created by: generate-chains.py]

Certificate chain where the root certificate is not self-signed (or
self-issued for that matter).

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8d:5e:30:60:e5:57:f6:f3:09:84:b2:6d:4f:a0:fb:9d:6f:5e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ca:05:80:6e:cf:1f:63:66:cf:05:e3:dc:51:2c:
                    12:41:1f:96:f5:a5:94:96:c5:5e:34:36:bc:90:df:
                    85:73:5e:26:ed:f3:12:fb:90:a0:fb:05:b4:8e:05:
                    71:07:4c:cc:32:ae:95:89:87:8c:9a:08:22:f0:a1:
                    47:da:be:5c:12:c7:18:31:aa:19:61:59:3d:3a:7b:
                    e9:e9:1a:9f:56:d9:5b:31:b4:3f:bc:ad:da:1c:e9:
                    0d:dc:40:5c:4d:5d:8c:5a:ad:78:97:ab:cf:28:fb:
                    52:7d:74:6f:d3:27:da:5a:e4:37:7e:1a:56:8b:f3:
                    85:55:c5:aa:f8:96:3d:51:52:5f:be:60:47:97:fd:
                    82:ef:28:b7:cd:50:64:e2:70:43:7b:1f:5d:f3:9e:
                    d1:c2:dd:22:a6:08:85:94:e8:80:69:62:67:01:ed:
                    12:bb:96:96:83:b4:02:4f:5a:a0:33:63:99:e2:1c:
                    88:33:38:fa:b7:20:70:2d:91:e7:ca:27:9b:81:2f:
                    29:a6:d6:f0:ea:ec:7b:a4:86:61:56:af:bd:30:26:
                    91:e7:d9:18:e9:4e:90:6e:66:ab:1a:48:70:62:9d:
                    b9:0e:11:fa:49:d5:3c:8c:20:52:9b:b0:6a:71:85:
                    a5:92:66:22:ea:79:0c:53:b1:66:ab:82:3d:7c:16:
                    78:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7F:FE:A1:79:97:34:D7:6D:63:C2:1A:94:43:45:AE:6E:0D:30:5A:18
            X509v3 Authority Key Identifier: 
                keyid:1E:C9:1C:45:5F:46:A4:0C:10:15:82:7C:01:23:5B:21:F4:AE:88:D9

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         7a:73:db:43:7a:02:db:37:6b:cb:6d:a4:2f:87:93:77:9a:9a:
         3c:d2:51:d4:70:2e:6a:6f:ae:0d:9c:93:ba:d3:1c:35:06:a7:
         d7:ef:40:3e:ae:c6:42:91:98:80:aa:e1:2d:40:ec:0a:d7:05:
         4b:ea:98:13:4f:97:c4:48:d6:ce:97:03:bd:78:fa:78:15:93:
         23:91:e8:a1:10:e2:03:6f:a6:3b:e2:40:4c:17:91:8c:46:bf:
         a4:ea:33:2c:b6:82:50:4a:b9:57:3d:34:90:3f:91:26:fd:41:
         bd:58:cd:06:9e:1e:87:72:46:dd:fe:b7:94:b4:1b:d8:40:4c:
         2f:0c:a0:62:ec:9c:26:a1:ce:ef:83:1f:06:6b:19:f8:8e:82:
         bd:08:3a:ca:db:71:65:47:fa:77:19:e8:36:02:a0:cb:7e:98:
         68:35:27:c8:99:1b:f3:1e:f1:7a:44:b6:81:2c:ea:74:00:b1:
         4e:08:08:73:ae:49:fb:b8:07:36:b8:8f:bb:ff:6f:2a:11:53:
         f9:2a:82:67:43:f7:fb:85:c0:41:29:57:0b:08:1a:af:8a:87:
         91:d2:91:0e:d6:20:e1:a8:79:86:8a:6d:71:e2:91:25:05:7f:
         81:22:4c:7d:39:4e:a7:ab:a5:08:ff:52:0f:1f:25:7a:d9:61:
         0b:f9:a6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:24:c9:62:9e:9b:f4:e2:b7:3b:f4:4d:c4:01:48:be:71:f6:09:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:04:1a:b6:ce:13:85:6b:9b:9e:2d:2f:a5:
                    b4:b5:05:44:72:4b:8b:80:23:1e:0b:1e:1d:30:eb:
                    c0:f5:c1:a5:17:e6:13:5d:b4:2f:bf:7c:a9:95:38:
                    cc:88:9a:6e:26:e2:3a:22:68:fe:b1:a3:e4:70:04:
                    73:70:78:b7:68:7a:c7:0d:86:c0:ad:3c:a4:ad:83:
                    a5:00:a8:a3:c2:59:53:3a:77:33:c7:f2:56:15:1b:
                    85:7a:2f:b4:44:e1:40:5d:04:9a:ce:0c:4d:5c:33:
                    40:4c:68:de:b9:58:48:f1:b6:cc:a4:02:48:86:46:
                    66:32:0f:0e:3d:fd:fd:af:df:96:27:b1:60:5b:0d:
                    be:25:b5:dd:84:ec:f8:9d:da:21:44:95:df:46:16:
                    3f:77:69:8e:70:bc:9a:78:ec:45:89:13:0f:be:34:
                    7e:00:4d:83:cd:d3:f4:fe:3f:6c:ce:d0:6f:36:64:
                    6c:c1:61:dd:c2:68:1d:b9:78:2d:2d:0b:32:96:75:
                    3a:d6:a5:d3:3f:2d:55:0e:e7:9e:aa:7d:31:a0:4d:
                    ac:91:20:1e:46:41:85:3f:03:45:db:8f:98:c2:c2:
                    b8:7d:e1:f2:e7:b8:6f:a8:cb:b9:d6:7e:8a:29:98:
                    b3:b3:ed:38:a4:a7:fc:9d:c1:e1:63:68:00:64:a5:
                    e1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1E:C9:1C:45:5F:46:A4:0C:10:15:82:7C:01:23:5B:21:F4:AE:88:D9
            X509v3 Authority Key Identifier: 
                keyid:91:D7:20:C6:1D:00:21:35:53:7D:FE:50:11:02:DD:E3:40:2B:9A:A8

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         70:29:0b:34:38:8d:32:53:0b:34:77:56:1f:e5:2c:3d:15:bb:
         b5:ed:87:9c:e9:8f:a8:d7:3f:b5:36:cd:f3:09:39:89:df:c0:
         90:71:c2:b2:4b:77:dd:79:62:91:e5:1b:2d:58:21:e4:69:d9:
         b7:93:38:ac:7e:64:bc:97:99:d4:b9:bc:70:e9:59:32:b5:a2:
         0d:1e:4c:8c:ce:c5:92:8d:db:b1:ec:61:68:f8:73:6b:ce:34:
         e0:ed:c4:9d:0f:61:2a:e7:a1:5b:b5:4b:a6:3f:98:9c:00:2c:
         78:19:79:98:5d:04:3a:af:74:d9:a2:a2:c9:7f:ed:c1:c8:c5:
         a8:16:46:37:83:88:49:7a:54:8f:9c:8d:ac:82:59:95:5b:9b:
         39:86:5d:47:c4:3d:d2:0b:55:3b:50:4b:ca:f3:06:99:a6:ea:
         0f:64:6d:7d:f6:3c:c1:df:b1:e8:4c:f9:6b:e4:04:ec:40:97:
         7d:96:b2:d7:53:4a:1c:56:e1:95:1d:81:39:f0:c2:cb:07:92:
         ac:9a:0a:1c:9f:cf:e7:b9:f6:c9:e8:f5:e9:02:ae:f0:11:eb:
         ac:af:c2:ef:b1:b4:79:d1:88:82:7e:c5:a1:a3:19:49:0f:b6:
         9b:06:e4:42:0a:d9:ec:47:60:b8:ce:79:5f:07:d3:f5:db:b4:
         df:ef:01:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8a:27:93:f7:53:8e:01:34:58:db:a9:3d:d0:8b:61:22:1b:4b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ShadowRoot
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:87:39:cb:43:d9:24:e9:2c:54:cd:18:ea:
                    b8:87:ec:2f:d3:57:e3:9c:23:be:94:3c:26:41:db:
                    61:40:b8:ad:07:53:f1:69:c5:b4:2c:6a:ad:de:e5:
                    4a:bd:e3:0f:77:c4:59:fa:ee:d5:3a:1a:93:ca:cd:
                    b1:22:2a:24:42:5a:01:42:e8:57:74:f9:89:56:f8:
                    c1:13:f6:c9:42:9b:45:7b:ff:b7:aa:c1:1f:1b:e8:
                    02:24:12:97:0d:84:b9:62:70:83:93:72:cd:9b:1a:
                    26:27:92:34:46:51:c5:b7:c7:4a:b4:7a:8a:84:98:
                    e2:f7:90:4d:cc:cf:3d:ee:85:91:8d:75:60:38:0c:
                    e5:0b:00:e6:fe:e9:c3:19:64:3f:2d:c8:14:f1:d9:
                    a9:76:05:54:a8:5a:9e:64:56:ed:60:43:c5:98:db:
                    7a:ae:da:2c:56:cb:87:00:6f:3d:83:3b:a3:5c:f5:
                    55:0d:6c:ab:ed:68:c1:b8:1d:a5:d0:77:1d:b7:e6:
                    52:ef:2c:75:3a:98:ec:51:6f:15:5f:64:82:f6:d1:
                    90:bd:ee:01:28:e5:89:0e:01:ee:54:07:1d:0e:7a:
                    f0:82:9c:cc:c1:c5:4a:f6:a9:58:33:c5:cc:a3:86:
                    17:72:19:92:2c:ae:6a:46:a8:a8:25:2a:cf:ba:70:
                    c1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                91:D7:20:C6:1D:00:21:35:53:7D:FE:50:11:02:DD:E3:40:2B:9A:A8
            X509v3 Authority Key Identifier: 
                keyid:85:C5:B6:72:29:30:56:96:1B:80:37:79:29:18:A2:BD:48:F9:9E:4A

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/ShadowRoot.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/ShadowRoot.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         0b:9f:d0:78:b3:19:0f:6c:e0:75:a1:2e:6e:37:59:02:ae:aa:
         57:83:fd:9b:55:37:36:d5:d9:fe:fb:89:dc:da:08:ef:29:04:
         fc:ab:73:c5:8d:c6:62:38:91:51:49:dc:86:86:f1:3d:77:19:
         b8:b5:94:86:01:eb:cd:ba:f8:bb:5c:a0:4e:be:51:4a:7b:1f:
         76:b5:0d:01:5c:9f:b5:73:09:5a:2e:d4:8d:e2:20:0a:ee:28:
         af:7a:ae:31:e2:4b:b0:62:27:05:6a:ab:40:0a:2b:bd:bc:d8:
         ca:8e:ee:c1:a1:99:0e:5d:9d:de:37:bb:3a:a0:b3:67:b7:f9:
         8b:1b:2f:1d:57:38:e9:fa:d6:aa:12:bb:57:64:2a:29:32:fa:
         7c:30:59:73:18:08:94:a6:bd:fc:df:1a:f8:c5:5d:96:5a:61:
         c0:f6:10:0e:1a:64:27:74:82:07:22:c0:90:eb:df:9a:b4:ef:
         c5:d8:bf:f1:44:70:17:3b:23:a1:0b:12:54:8b:1d:89:54:bf:
         2d:df:97:73:91:f5:8d:9f:0d:ab:94:08:3a:7e:c6:c7:ee:12:
         ef:f6:05:f8:1f:35:5d:f0:ff:38:d8:24:35:e4:13:19:83:60:
         f4:62:9b:c5:64:d8:8c:c7:34:60:72:99:1c:60:0d:e1:17:16:
         27:2d:af:4e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----