[Created by: generate-chains.py]

Certificate chain where the intermediate's Basic Constraints extension is
not marked as critical.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:45:83:31:ef:c5:47:03:ae:f7:5a:80:bf:fb:8c:bc:23:1e:dc:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d8:cc:f6:ec:23:eb:20:d2:0e:7e:29:04:ec:8c:
                    b9:bd:ee:47:6e:0b:ac:a9:fa:22:a4:fc:41:74:04:
                    d0:b5:8a:37:56:29:d5:be:e7:e0:45:88:30:d9:5a:
                    e0:a7:69:fd:d1:c3:4d:1c:42:68:ae:7d:cf:54:db:
                    84:b9:91:e6:68:c5:d1:6d:a4:34:4a:7f:8f:3e:a3:
                    a8:c4:0e:3f:90:42:a9:b8:84:c2:fd:51:ed:eb:e9:
                    6d:cc:5a:22:f7:fb:eb:29:7d:5d:97:9d:26:eb:10:
                    29:bf:2a:bd:b0:2f:33:9b:e7:a3:17:9b:db:b4:ce:
                    f8:5e:66:25:7c:8c:e3:c8:53:cf:c2:c3:80:cf:e6:
                    68:98:ca:bd:e3:b8:d3:bc:e2:03:d0:31:5b:ef:21:
                    6d:2d:42:5e:cb:9a:3a:4d:7a:bd:e7:75:75:ff:63:
                    95:aa:08:20:fb:a8:6f:95:a9:ea:45:07:c4:a7:32:
                    89:58:94:98:76:2f:5d:d4:85:90:e3:be:96:33:1c:
                    53:d7:bd:58:87:75:4e:8c:c9:c9:6b:c8:b6:3f:d3:
                    46:1a:9f:4c:de:a5:48:cd:ad:87:fe:7a:82:f2:0c:
                    65:84:f5:09:ce:cf:fd:6c:66:57:91:dc:fb:85:d1:
                    ff:b2:4c:ce:2f:a3:73:b1:dc:1e:13:5c:03:1a:a6:
                    99:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FD:20:6C:45:13:AE:E6:1F:25:FD:C9:1E:E3:09:32:CC:34:28:4E:CF
            X509v3 Authority Key Identifier: 
                keyid:5A:44:77:BA:2D:5E:48:FE:11:68:59:58:40:91:67:E2:22:BF:31:38

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         d3:43:07:5a:74:71:a0:d8:cd:c2:ac:57:48:ac:61:24:65:99:
         15:1f:33:cd:b2:1a:60:f7:49:24:8b:93:ab:fd:b1:44:28:2f:
         d0:bb:13:b6:9c:d4:95:12:13:c4:9c:2b:ea:6f:eb:23:8d:46:
         d5:a2:ed:e2:79:29:80:16:f7:06:78:df:d4:c0:81:72:f0:53:
         13:45:a5:d9:03:e2:13:f9:d2:a1:30:ed:d3:82:74:eb:2c:48:
         de:0b:3f:67:59:3b:a7:ca:be:33:82:9c:b9:1e:96:f6:99:f9:
         a5:e2:1b:43:3d:a2:2b:53:b4:e1:f3:56:c0:17:f4:bf:2e:4a:
         0c:a3:e9:80:0d:41:53:0c:0b:26:60:3e:d6:d1:de:41:35:7c:
         7e:e1:a0:b6:7c:63:a7:78:cd:ef:5e:95:27:da:b4:14:4d:38:
         8e:01:ef:4f:12:44:39:38:3b:b4:fb:09:73:1a:35:f6:70:0e:
         ee:54:92:81:51:67:ab:47:2c:68:a1:9a:97:af:05:8a:1f:99:
         0d:6d:b5:1e:92:64:20:f1:d1:67:17:cb:45:6f:65:33:e9:a7:
         14:4e:bf:9c:e1:4b:4b:d8:82:ba:d4:bf:3e:cb:6a:12:3a:4f:
         3f:09:3d:bc:1e:a5:2d:d7:f4:69:6e:d1:6f:40:c0:fb:43:97:
         4d:37:b6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b0:5d:cd:6e:fd:4d:77:89:ef:99:fc:fd:05:d3:22:44:3f:93:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:fb:af:dd:12:ab:aa:06:e0:72:bd:43:4c:3e:5b:
                    cd:02:9c:ca:c1:42:6d:cd:47:6e:6c:4c:6b:3f:2e:
                    c1:3f:2e:88:3d:77:4f:1c:34:60:ba:f7:fb:58:64:
                    3c:c2:76:5d:30:88:48:22:81:2f:27:c8:1f:b4:ed:
                    96:07:5d:f7:7c:4a:37:be:fe:4f:7b:1f:19:82:21:
                    24:18:c9:ae:a7:a5:58:62:9d:6b:f9:9a:88:56:0f:
                    7f:b4:0c:1a:d5:4f:ab:2c:c4:97:6e:ec:db:b1:a0:
                    43:86:34:08:2e:21:16:f8:f6:3e:2a:e8:ca:9a:a4:
                    fb:91:7e:f9:43:19:42:08:10:7e:92:af:60:45:4e:
                    30:e4:d3:d3:e9:bf:32:cf:c1:1b:a0:52:6e:a4:aa:
                    ed:13:6d:e8:7f:68:c6:88:84:67:20:8f:6b:82:9c:
                    49:5d:b4:95:63:9d:0a:dc:9f:ab:7b:b3:eb:f7:ad:
                    48:35:f5:44:ec:84:23:e1:5b:ca:49:16:e0:c2:5a:
                    8f:3e:d2:2b:fa:50:08:bf:12:3b:da:8c:96:66:93:
                    69:5b:27:4e:b8:e7:8d:11:14:e6:29:23:b5:d9:f7:
                    b0:f9:e2:90:e2:d8:be:8d:1d:dc:89:f5:eb:15:df:
                    58:88:e8:91:14:94:9d:37:e3:10:1a:de:30:3c:18:
                    d7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5A:44:77:BA:2D:5E:48:FE:11:68:59:58:40:91:67:E2:22:BF:31:38
            X509v3 Authority Key Identifier: 
                keyid:B8:16:92:87:E1:0C:B9:E5:61:C3:DA:A5:05:11:6A:58:DD:78:65:8E

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: 
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         58:91:e0:fe:34:bc:ad:76:b1:db:0f:36:82:66:95:b5:59:7c:
         eb:57:19:5a:95:98:47:99:10:25:84:ce:6a:c4:4d:14:cc:75:
         79:e3:95:27:6d:ad:e6:d3:0f:6c:04:7c:25:29:37:89:b4:ae:
         08:30:81:6e:06:8f:0a:8f:d4:a4:f0:2e:5c:2a:3c:a7:69:c9:
         f8:a8:43:38:6b:b4:20:5a:89:0f:00:f0:fe:ab:ae:5b:69:b2:
         49:a8:e6:17:44:e3:1c:46:2a:37:62:7a:a6:4b:81:57:b3:9c:
         22:c2:be:58:62:86:29:7b:27:ef:a7:a8:11:97:bd:f6:0a:73:
         e4:83:53:49:6c:27:0f:b7:6f:2b:72:dc:0d:99:5e:a3:e5:5e:
         6d:c9:b0:f7:a8:4b:83:24:a3:3c:fe:51:c1:f7:2d:c8:64:0e:
         d7:0a:92:30:96:03:cd:97:44:58:a5:08:ec:f0:d1:47:b1:9b:
         5b:6f:4d:f1:11:c9:6c:4b:ca:e2:65:0e:f6:cf:2d:1a:aa:ae:
         e2:5b:fe:04:dd:55:51:da:d2:ce:f4:3e:ab:09:02:6b:d4:90:
         e2:4b:30:d7:1f:19:64:19:b9:1f:56:a4:95:2b:94:f4:3f:78:
         02:50:12:f4:4e:5d:fa:d2:1b:cf:6b:63:dd:c0:1e:13:1a:5e:
         db:9c:f4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b0:5d:cd:6e:fd:4d:77:89:ef:99:fc:fd:05:d3:22:44:3f:93:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:1d:65:8c:79:04:f0:c9:d1:3c:23:76:e9:
                    3e:2c:c9:52:e1:fc:b9:bf:35:8d:66:e4:37:66:b5:
                    4b:ff:1a:9b:cb:30:e1:d4:30:54:fb:6e:f2:43:fd:
                    76:b8:84:51:79:12:5a:65:95:87:ec:3d:19:b0:ab:
                    04:94:64:aa:bc:e5:bf:e2:77:fd:07:28:3c:b5:20:
                    da:55:2c:79:04:f2:71:6e:31:b4:63:14:80:4e:c3:
                    83:1e:ea:7e:5a:c0:4d:48:4a:2e:9e:52:80:80:98:
                    22:10:4a:05:d7:db:13:8f:37:67:20:63:19:01:92:
                    07:46:94:b5:c9:ba:e7:68:af:06:57:35:69:50:50:
                    22:23:0b:92:a1:98:32:08:88:5c:8b:4c:7c:a5:6a:
                    f3:31:ee:bf:4c:59:b0:a1:cb:e8:28:1d:fa:4c:d3:
                    1b:e6:2b:03:1a:4f:b5:8d:93:5d:18:95:c7:93:c1:
                    8b:6f:55:17:34:17:e9:d8:70:47:c8:4c:b2:5a:fa:
                    a7:aa:66:b7:a3:62:17:0a:7c:27:15:ef:c2:bc:5b:
                    7a:7d:88:c7:2a:45:0c:d7:3b:91:7e:72:c6:30:cb:
                    12:39:1e:a2:8a:88:39:30:f0:54:b4:19:6f:b6:5e:
                    e8:01:60:2c:2b:27:cb:e5:93:49:ab:b8:9e:f0:29:
                    e6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B8:16:92:87:E1:0C:B9:E5:61:C3:DA:A5:05:11:6A:58:DD:78:65:8E
            X509v3 Authority Key Identifier: 
                keyid:B8:16:92:87:E1:0C:B9:E5:61:C3:DA:A5:05:11:6A:58:DD:78:65:8E

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         3d:d2:b8:8f:57:04:ce:d4:1b:a2:94:e8:1b:2c:aa:b4:47:9d:
         c2:0d:5c:5e:85:0a:cd:fa:95:da:5b:25:34:31:19:d6:e3:db:
         9b:4a:ee:4a:7b:f8:80:19:bc:a4:2d:da:db:c2:dd:27:7a:bb:
         b9:ba:33:4d:88:ed:b2:3d:d0:3c:a8:d3:ef:d0:8e:e6:58:cc:
         3a:60:4d:48:b6:8f:09:82:87:9a:87:90:e2:e7:1f:b8:a9:5b:
         72:ab:36:a4:aa:67:82:63:a1:5b:45:12:09:4b:62:c8:1d:8b:
         d1:1b:e2:4a:d9:05:e9:38:3c:db:a7:d7:2d:55:51:76:28:a5:
         46:8c:a2:38:8d:5e:60:27:74:7a:22:2d:2f:2a:06:76:bb:4e:
         3c:82:08:00:ca:9e:42:81:71:54:a4:f6:52:21:11:04:1f:ba:
         b5:cc:95:74:b0:13:ff:6e:12:0a:80:51:d7:f5:b1:81:cc:30:
         dc:2c:6c:ff:16:6e:34:dd:77:c4:bf:9b:d7:fa:0b:7e:2f:84:
         ab:61:58:95:d5:04:8e:7a:8b:ad:69:10:e9:d7:80:d9:74:1a:
         32:09:fc:6b:37:1a:2b:4f:d3:ec:5b:f1:ea:f9:1a:93:8b:c9:
         92:09:a5:80:d3:11:ea:75:08:61:57:21:6b:74:cd:e7:7d:3b:
         c2:1c:11:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----