[Created by: generate-chains.py]

Certificate chain where the intermediate sets pathlen=0, however
violates this by issuing another (non-self-issued) intermediate.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9c:41:88:f3:dd:f7:23:b5:c4:3d:82:f4:20:ea:b9:2e:9e:c5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate2
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:ed:2c:42:bf:ef:7c:65:e7:f7:d5:37:8f:
                    b8:ed:bf:09:be:83:b5:22:ba:8d:8e:5f:63:cb:98:
                    69:ba:fc:79:a6:2c:02:70:b2:11:49:24:32:59:6a:
                    10:ec:da:8a:fa:51:27:d2:95:a6:08:03:1d:39:20:
                    61:4b:c0:a0:f3:54:1a:53:f4:53:34:42:66:af:d3:
                    08:5c:0e:ab:ca:c5:97:1f:76:60:0d:5c:06:56:96:
                    42:a6:73:fc:63:0b:e9:02:a2:64:7b:18:4e:6d:7e:
                    88:b9:65:bf:52:bb:e5:57:ee:af:81:54:b0:6f:b3:
                    c5:22:da:9c:7d:40:d1:86:01:9d:db:37:be:91:50:
                    94:9b:a8:7e:d9:54:32:81:50:fd:14:54:6a:a3:8b:
                    b5:2c:1e:c0:9a:a8:de:fc:96:f5:1a:ca:97:70:60:
                    79:94:5e:67:e8:90:fe:c3:68:63:f0:5d:64:e5:ec:
                    89:a7:75:61:0c:68:2a:fe:b0:d3:85:17:0b:5e:f9:
                    1b:ff:1b:7e:f4:52:ff:20:56:0f:7b:50:15:db:96:
                    77:3c:09:4e:98:2b:c7:8e:55:bb:59:7c:52:b7:6e:
                    45:20:d7:b6:c7:7e:4f:71:d7:dd:e6:b9:58:04:60:
                    2a:e4:40:64:5e:2c:8e:30:96:bc:84:db:42:b9:66:
                    8b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                34:29:52:19:D8:05:D8:C6:BF:24:AE:2A:40:05:81:8A:A8:86:D0:CC
            X509v3 Authority Key Identifier: 
                keyid:B3:4F:7C:A1:46:15:63:82:54:3A:AF:D2:F7:40:56:21:7B:14:44:51

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate2.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         83:36:b7:c0:39:1f:ba:16:cc:86:88:6e:65:a6:e6:2c:98:22:
         44:ef:81:fb:49:3f:c1:0f:6f:52:c4:9d:7d:1f:96:25:08:b7:
         38:ce:8a:8e:0f:e8:c9:ab:3d:85:44:8b:1d:62:d9:22:05:ff:
         bf:b7:04:c8:5d:65:d4:2a:39:3e:88:b6:41:a2:8d:48:6c:cd:
         68:c9:43:af:ab:bd:bd:2e:7f:d1:d9:31:22:f6:b0:c2:b4:48:
         a9:e1:46:fc:af:72:d3:68:40:93:10:51:e2:64:52:cd:80:8e:
         03:c1:5f:0d:37:94:16:fc:5e:15:d9:ea:0d:b0:20:19:12:8b:
         23:51:8b:8e:b3:cb:7a:f8:48:28:21:c9:84:b3:16:e4:16:d1:
         4e:78:bf:ac:fb:4c:a7:18:a7:a3:65:3b:23:0f:1e:94:a2:87:
         94:28:0b:11:83:e7:3c:36:34:2f:c9:eb:ef:6b:04:aa:32:00:
         fb:22:43:c1:b9:44:a7:28:f9:19:76:8d:8e:1d:d8:21:04:93:
         09:a9:7f:14:82:d4:83:d0:31:de:7d:1b:49:f8:6e:fe:4b:9a:
         bf:49:c2:6a:e8:7b:0b:2d:6d:b0:0d:41:5e:d7:01:35:74:8d:
         5d:a3:9a:e9:dc:7f:fc:d7:93:32:ca:ad:4c:69:dc:55:7b:62:
         b0:bc:3f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8c:9b:75:3d:af:a1:29:c3:af:35:d8:95:1a:c4:3f:ab:fb:b8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate1
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Intermediate2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a5:da:13:9b:86:a9:21:3f:1b:20:2d:25:a0:65:
                    28:27:5c:0c:2c:f5:ff:28:2a:4c:5c:63:4a:08:c6:
                    90:06:55:13:54:d9:6d:c4:83:64:22:c0:1c:40:b1:
                    c9:f5:64:af:1d:cf:55:74:02:e8:97:af:3b:fe:ba:
                    32:f9:3a:10:79:6f:5b:81:b8:cf:d6:25:3b:36:7f:
                    fb:17:a4:75:32:96:d3:b5:c5:97:87:8f:cd:63:e7:
                    0f:28:3c:8e:0a:1e:46:91:a9:64:8b:70:7c:c8:ef:
                    b1:fa:82:50:2f:56:5c:17:b3:18:b9:4b:26:e2:a5:
                    53:a8:27:a0:b7:d0:61:12:93:a7:5f:9a:1d:41:5c:
                    53:c3:29:bd:96:44:8d:a6:1f:f9:e7:74:13:5a:84:
                    e3:3c:a5:41:cd:e9:86:72:c2:12:ea:2a:78:76:f8:
                    88:93:f6:8a:d0:de:3e:b0:33:a0:96:fa:40:cb:c0:
                    e0:49:4d:c1:e8:46:40:b3:7f:a3:e5:01:d3:4e:9b:
                    e0:6c:21:6e:4a:d3:d6:e5:0c:1b:e1:1d:39:54:ca:
                    35:4f:2a:1a:b0:b3:66:40:4e:f7:e9:72:70:f4:70:
                    83:c6:81:12:bd:c9:c3:cc:53:95:fa:e4:21:74:f5:
                    1e:f6:69:1c:42:6b:ba:ec:b5:83:33:41:7b:72:b8:
                    a4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B3:4F:7C:A1:46:15:63:82:54:3A:AF:D2:F7:40:56:21:7B:14:44:51
            X509v3 Authority Key Identifier: 
                keyid:78:A0:50:E7:F0:D8:50:C1:A8:AE:40:CC:35:8A:73:B1:2C:78:51:4A

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate1.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate1.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: sha256WithRSAEncryption
         72:ce:a5:a2:63:b0:38:dd:a7:51:00:0a:3b:8b:6e:81:b4:d4:
         3c:ae:f9:8d:c2:98:a3:b4:5e:8e:2f:79:a4:5e:84:89:d5:b8:
         92:8d:18:2e:99:b3:2b:2e:06:d7:d3:95:10:79:69:3d:9a:05:
         56:ba:c6:52:ce:73:57:02:45:c3:3c:2c:0a:4b:de:85:45:0f:
         af:7a:b3:0c:12:ee:df:d8:b6:9e:e3:d4:64:c4:1d:28:a9:db:
         28:9b:7d:c1:39:28:92:e6:23:05:7f:0e:5b:cd:3a:0e:22:ad:
         4b:3b:6e:d7:e2:f2:13:8e:27:fb:d7:94:d6:e3:24:df:9d:c4:
         76:dd:c2:d4:43:c9:1c:34:cd:02:7b:67:bf:b2:83:b3:90:0b:
         b1:7e:ff:49:de:3d:29:b3:09:09:de:c5:91:51:7c:d7:71:7b:
         4d:53:f0:22:1e:52:0f:96:da:a8:18:c4:bc:50:67:9d:a0:d4:
         88:9a:d9:9d:16:04:21:97:cf:84:20:56:a6:41:c1:93:77:f0:
         e3:da:2d:56:44:fb:55:6d:e8:be:6e:02:6c:79:5e:0f:5f:b7:
         d1:c5:6e:41:eb:63:71:db:8c:56:bf:cd:02:bf:2e:80:ae:19:
         78:0b:43:69:bf:6a:4f:3d:9c:ed:cc:0a:cb:f3:d5:12:98:11:
         89:3b:11:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a0:bf:32:38:48:73:e8:3d:c1:b2:cc:5c:f8:d9:94:14:a9:2a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Intermediate1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:d3:7c:15:ee:13:ee:f8:8a:57:2c:76:df:
                    71:f0:10:21:58:fd:6c:9e:02:b8:6b:09:77:40:de:
                    d2:cf:62:8b:5b:9f:29:fe:11:a3:6b:c8:fb:f3:7f:
                    aa:22:13:87:7f:c1:3f:41:40:3f:1b:21:51:ae:5a:
                    03:ae:86:c2:68:7c:8d:3d:1b:0e:d9:62:98:5a:66:
                    d9:3b:8f:88:2a:44:b6:df:c9:2b:1c:78:95:d3:e1:
                    50:7b:18:42:3b:f3:1b:41:bb:48:d9:31:54:6a:d9:
                    ef:7e:8a:a6:fe:ce:bb:5e:f8:13:68:f2:61:be:75:
                    a2:65:5f:d0:c5:87:fa:f6:e1:04:05:2b:50:a0:88:
                    ac:e2:d5:af:b6:83:6b:b8:b3:a0:1a:2d:65:71:5f:
                    67:a6:97:3e:43:a2:5e:80:c5:fe:36:40:34:05:ea:
                    79:31:0a:fa:b9:68:9a:58:f3:28:b6:7a:dd:6a:06:
                    4c:da:76:f5:a5:63:70:8a:27:64:29:87:c1:8b:77:
                    fa:f0:cd:ef:56:a9:4c:7f:14:6d:da:c8:b8:b5:80:
                    8d:df:68:60:61:6f:e3:31:f3:d7:47:8e:0e:58:f0:
                    f1:9f:f1:7e:d4:d9:41:b9:6a:f4:33:4d:f5:7f:ef:
                    d4:b4:91:50:4b:4b:65:d9:8d:de:cc:a4:d3:88:17:
                    ca:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                78:A0:50:E7:F0:D8:50:C1:A8:AE:40:CC:35:8A:73:B1:2C:78:51:4A
            X509v3 Authority Key Identifier: 
                keyid:FB:44:5A:0F:03:A9:3A:3C:75:B4:3E:87:2E:99:99:2E:73:04:0E:0F

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: sha256WithRSAEncryption
         8c:f9:1a:9e:d3:a2:a9:70:f1:c5:96:6c:07:11:8a:43:5f:0f:
         cc:8c:ca:60:03:2b:a5:bb:fe:b1:c2:52:2a:9b:4a:5d:2c:22:
         03:2e:8f:8e:3d:bd:25:a9:8f:c1:cb:04:f1:94:4d:b2:d4:a9:
         fa:b1:cf:a0:0a:aa:5f:b7:56:45:88:14:4e:35:f4:af:00:7b:
         21:76:bf:d6:ab:58:c9:67:4f:de:c9:5c:30:80:b7:de:0f:33:
         1b:d0:f7:9a:ff:52:0f:82:5a:61:7f:f6:d3:cd:72:c5:85:8e:
         ce:85:11:c6:5e:04:a9:22:dd:d8:ad:9d:9c:b9:f6:7d:79:31:
         fa:07:1c:88:cb:e8:1c:56:cd:31:0a:8a:62:14:02:42:c9:86:
         19:f9:75:3d:5f:1e:28:f5:db:a5:59:b0:66:7c:ad:e9:3c:05:
         9d:c2:52:b3:23:0c:91:8c:88:df:51:aa:a7:67:64:c0:c0:23:
         63:29:75:ed:37:69:68:ac:c6:42:29:17:e9:e9:b4:4a:00:f6:
         18:a8:a7:fc:2f:6f:9a:ca:c7:9a:ff:84:63:8f:01:6d:30:af:
         d4:c9:aa:cd:70:d0:ed:e5:b2:ce:90:6c:19:70:96:46:4e:09:
         be:e4:9c:84:64:3b:41:ff:69:d8:32:b5:f8:a6:d9:fd:9e:de:
         cf:99:a3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a0:bf:32:38:48:73:e8:3d:c1:b2:cc:5c:f8:d9:94:14:a9:2a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:92:08:56:82:b9:30:af:14:a4:b9:10:66:49:4d:
                    2a:e7:3c:3b:38:4e:a9:b3:1e:76:0f:32:75:73:d0:
                    d9:c6:21:3a:86:77:01:b7:a9:ec:52:96:d6:01:97:
                    a4:90:f3:63:24:da:ed:9e:57:98:05:ee:e9:22:69:
                    00:02:c6:cf:16:fb:54:7b:00:33:31:2b:0a:cc:c3:
                    54:98:7a:a0:11:c8:45:78:b5:e7:3a:17:7e:4f:5b:
                    a6:e8:97:9f:73:6a:fc:49:38:d7:4b:3c:51:05:e9:
                    aa:a1:0b:a9:f5:86:52:b7:d3:3d:31:ec:ca:82:64:
                    15:f9:8a:e8:8e:c8:f6:88:35:ae:7c:b1:ba:4a:86:
                    07:f0:85:0e:99:6a:30:a9:a4:a8:0c:d5:21:57:e0:
                    cd:95:96:47:22:bf:93:bc:62:78:c2:59:ab:ae:69:
                    12:75:69:11:c0:60:8d:9d:d7:54:6e:e4:4a:44:0d:
                    75:4c:4b:e4:0e:96:69:0c:5a:be:97:fd:5f:29:8a:
                    a8:46:60:10:b8:a3:c5:ae:47:2d:9a:3f:79:1e:90:
                    44:f7:9d:c9:1b:3e:ad:35:45:83:5f:5d:89:c6:24:
                    a7:b5:bf:09:47:22:f8:30:b8:94:34:85:4f:21:89:
                    52:63:fa:db:01:e5:0f:e0:f3:36:97:5d:2e:6c:6c:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FB:44:5A:0F:03:A9:3A:3C:75:B4:3E:87:2E:99:99:2E:73:04:0E:0F
            X509v3 Authority Key Identifier: 
                keyid:FB:44:5A:0F:03:A9:3A:3C:75:B4:3E:87:2E:99:99:2E:73:04:0E:0F

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         3e:38:e2:14:3f:f6:ff:1f:5b:a1:84:f3:2a:34:b1:92:80:c2:
         1a:8d:9d:b2:cf:db:5c:3d:0e:20:c2:64:a1:19:2a:47:b7:a7:
         89:3f:88:ce:ee:b3:cb:99:26:b1:af:21:9d:82:6b:63:f5:b9:
         d8:7b:73:3c:bc:86:db:3f:2d:62:65:94:13:2a:c3:00:c8:bc:
         da:be:f3:5e:01:33:51:4e:a5:d4:e6:4a:3e:df:3c:40:bc:5c:
         44:61:fb:9d:40:e8:11:ec:6d:95:a4:ea:0f:0f:c8:fd:e3:e6:
         90:01:ba:3b:16:55:ca:bb:b7:0a:7f:a4:36:99:ec:e7:a9:f3:
         8e:7a:97:9e:c4:88:22:ae:d9:14:0b:46:14:7d:c1:2f:91:61:
         2e:a3:74:b0:13:f4:60:f1:8f:ae:ae:bd:2f:86:de:b4:7d:c0:
         09:09:74:26:16:d5:c5:b9:93:ff:85:78:6f:87:7b:01:d3:eb:
         9e:18:57:6a:5b:45:e0:cf:cc:7c:ea:6e:6a:49:bb:8d:10:f8:
         6d:c5:b6:4e:9c:45:a0:43:63:1a:03:32:ec:b0:b1:78:29:c0:
         ca:36:62:9a:ba:35:61:ec:04:32:77:94:8a:c1:83:87:e6:e2:
         08:31:46:cc:0d:cf:08:bf:7b:a0:b3:d9:86:b7:55:83:ce:6e:
         f9:fa:1a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----