[Created by: generate-chains.py]

Certificate chain where the intermediate has a valid signature, however uses
MD5 in the signature algorithm.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a7:83:31:c0:be:2b:86:e1:e6:72:7f:d3:1f:63:e7:80:79:6e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:eb:5a:f4:88:03:0a:d7:b6:29:95:e0:58:
                    03:c6:35:36:b0:9e:e8:09:94:21:ba:07:cf:70:cc:
                    52:c7:2c:fd:fe:c0:86:50:b3:0c:7b:46:cf:eb:a3:
                    bd:5a:29:32:58:81:09:ff:85:f8:b3:77:75:58:61:
                    22:f1:59:99:1f:0d:58:dd:ff:f5:a8:51:62:0a:58:
                    db:20:8e:fd:5a:43:96:8f:cd:8c:98:ca:f4:ef:4c:
                    f6:1e:48:dc:48:46:60:8c:67:0f:9a:41:2b:6b:72:
                    e2:ce:11:25:3d:21:99:fa:3f:ca:34:b8:ae:f1:29:
                    7a:ce:bc:1c:ce:98:50:d6:70:93:0a:a5:c4:7e:05:
                    34:46:f1:ef:36:59:90:62:c2:b8:b9:71:ed:df:c0:
                    f8:fd:ff:08:fa:db:05:7d:99:35:2a:65:08:e0:a1:
                    66:cb:7d:55:bc:72:d8:1f:7d:0c:11:e2:8b:11:51:
                    2e:88:b1:d1:72:5f:c5:6b:ac:f0:1e:3f:97:b8:0e:
                    d4:49:9d:a0:b5:be:23:79:b1:0f:19:90:c6:00:e1:
                    62:b4:d5:db:25:8c:11:01:92:9d:17:16:fd:ee:bf:
                    37:6a:2a:d9:b4:4d:83:0c:24:2c:f8:28:7f:52:9d:
                    6b:b3:ac:b2:2b:86:e8:fe:f8:a5:3a:cc:9d:eb:08:
                    f0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4A:A4:1B:84:D7:FB:A1:F1:FB:D4:71:87:01:11:63:87:06:5D:A6:D1
            X509v3 Authority Key Identifier: 
                keyid:A6:86:14:22:AB:40:E8:07:5F:13:64:F3:8D:60:DE:30:B4:0B:B3:31

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         41:ab:fc:3a:ae:9e:c7:17:db:d9:e9:66:24:81:92:07:8a:d2:
         d9:92:d3:bf:07:e5:9b:ef:a0:e9:42:00:9f:a5:14:2e:13:2d:
         12:1c:78:fe:4e:0c:c2:98:a2:22:37:76:69:65:1a:ae:83:60:
         22:23:83:8a:3a:ed:e6:7e:8a:27:ad:72:92:77:d5:6c:d8:43:
         f2:92:0d:6a:66:39:52:98:5a:d1:23:7d:b9:15:a6:41:d0:fc:
         85:0a:c7:6f:f1:86:0e:26:a8:85:ec:8c:20:c1:34:16:07:da:
         83:d1:c2:4c:1e:a5:0c:33:9a:67:07:7c:1a:b5:eb:59:2c:55:
         d4:c9:91:a0:b2:e1:0b:51:1c:fb:04:a8:84:f1:f1:08:95:9a:
         b3:39:7a:00:71:c9:68:8e:b6:77:f4:04:ad:54:71:ce:3e:ad:
         fd:1c:00:6b:ad:14:98:cc:3d:55:20:d2:af:c1:30:ae:27:12:
         31:54:d3:24:3e:a5:82:70:81:17:c6:67:60:7f:d1:c3:21:a0:
         06:5f:0d:a9:81:e6:5a:57:a9:54:ed:91:fe:eb:47:75:c1:04:
         33:b2:ab:07:0a:e9:62:1b:2f:35:49:80:68:cf:21:f6:d1:40:
         d8:a6:31:4c:d4:1f:1e:43:0a:3f:6c:bd:66:a5:87:65:61:d4:
         e4:e6:99:46
-----BEGIN CERTIFICATE-----
MIIDoDCCAoigAwIBAgIUcKeDMcC+K4bh5nJ/0x9j54B5btUwDQYJKoZIhvcNAQEL
BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTE4MDMxMDEyMDAwMFoXDTIx
MDEwMTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAx93rWvSIAwrXtimV4FgDxjU2sJ7oCZQhugfPcMxSxyz9
/sCGULMMe0bP66O9WikyWIEJ/4X4s3d1WGEi8VmZHw1Y3f/1qFFiCljbII79WkOW
j82MmMr070z2HkjcSEZgjGcPmkEra3LizhElPSGZ+j/KNLiu8Sl6zrwczphQ1nCT
CqXEfgU0RvHvNlmQYsK4uXHt38D4/f8I+tsFfZk1KmUI4KFmy31VvHLYH30MEeKL
EVEuiLHRcl/Fa6zwHj+XuA7USZ2gtb4jebEPGZDGAOFitNXbJYwRAZKdFxb97r83
airZtE2DDCQs+Ch/Up1rs6yyK4bo/vilOsyd6wjwbwIDAQABo4HpMIHmMB0GA1Ud
DgQWBBRKpBuE1/uh8fvUcYcBEWOHBl2m0TAfBgNVHSMEGDAWgBSmhhQiq0DoB18T
ZPONYN4wtAuzMTA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91
cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0
dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD
ggEBAEGr/DqunscX29npZiSBkgeK0tmS078H5ZvvoOlCAJ+lFC4TLRIceP5ODMKY
oiI3dmllGq6DYCIjg4o67eZ+iietcpJ31WzYQ/KSDWpmOVKYWtEjfbkVpkHQ/IUK
x2/xhg4mqIXsjCDBNBYH2oPRwkwepQwzmmcHfBq161ksVdTJkaCy4QtRHPsEqITx
8QiVmrM5egBxyWiOtnf0BK1Ucc4+rf0cAGutFJjMPVUg0q/BMK4nEjFU0yQ+pYJw
gRfGZ2B/0cMhoAZfDamB5lpXqVTtkf7rR3XBBDOyqwcK6WIbLzVJgGjPIfbRQNim
MUzUHx5DCj9svWalh2Vh1OTmmUY=
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:57:99:fd:87:a4:e1:51:aa:94:8f:97:f1:9d:32:d1:b0:22:c3:6d
    Signature Algorithm: md5WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:eb:61:9e:9d:4b:23:cc:8e:39:d9:ac:07:05:da:
                    32:34:de:2a:dd:2f:62:ed:87:ce:7c:59:c4:9d:8e:
                    28:76:d1:f2:65:60:91:3f:7b:63:a4:2f:50:c4:da:
                    12:5b:71:a0:97:4f:26:cf:e7:b2:01:84:67:57:f5:
                    86:36:54:68:0f:28:f0:ea:7b:ca:1e:1a:bc:7e:67:
                    cf:fd:14:63:ee:c1:33:92:01:70:bc:12:6b:7d:2c:
                    8d:02:34:8e:85:1a:e4:f5:99:b6:c8:d5:18:d9:04:
                    a6:f5:40:fc:96:50:e2:3f:87:a0:d6:72:be:a3:a3:
                    45:89:07:74:d0:2e:9c:0d:88:12:02:a3:ef:17:ad:
                    2c:2d:71:66:11:89:3f:cf:57:77:28:77:70:bb:0f:
                    39:b0:b1:34:9d:e9:f7:a2:56:af:57:7e:ed:44:f8:
                    be:78:3d:28:c5:0d:37:15:2c:f6:99:4e:05:70:ae:
                    c5:99:45:a7:3f:bd:83:79:6a:a3:67:ff:71:2d:60:
                    e2:08:91:23:45:40:b1:40:52:e1:3b:1d:5d:d1:e9:
                    c2:b0:b1:c4:fb:7c:af:9c:c1:95:f1:a5:23:16:19:
                    75:9f:ef:be:b8:79:a7:f4:c5:b2:47:ae:6d:1c:15:
                    9c:26:0f:b2:0f:ec:92:8d:5a:79:c9:9e:16:e0:70:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A6:86:14:22:AB:40:E8:07:5F:13:64:F3:8D:60:DE:30:B4:0B:B3:31
            X509v3 Authority Key Identifier: 
                keyid:C4:01:16:E5:A0:16:10:29:62:67:7B:D1:22:42:6C:6F:15:2B:AF:96

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: md5WithRSAEncryption
         1d:90:e6:09:63:72:6b:75:64:0c:bc:df:1d:30:14:d6:40:35:
         67:2d:d5:91:0d:75:96:f3:7f:52:e1:84:f7:e2:94:b5:29:55:
         ee:5f:7d:46:6a:02:31:a5:d8:3a:77:e0:e3:4a:61:a2:75:ce:
         eb:fd:87:4f:56:63:15:b5:55:4a:e7:4d:c4:8e:c7:67:a6:0b:
         09:f6:a0:c5:f2:af:c4:fb:8c:a1:5e:92:47:17:87:ac:fd:17:
         d9:87:d8:6c:fd:89:84:72:83:71:e1:19:b8:ce:b2:cf:15:a0:
         3e:5d:a3:17:c5:e0:ef:8e:af:e0:c5:34:a7:34:ec:59:83:3e:
         41:6b:f6:64:96:4e:3d:27:d0:78:32:58:bf:79:95:7b:2c:e5:
         c0:0f:02:df:64:fe:51:89:63:7c:e8:8c:71:46:49:4b:d9:03:
         6f:e3:84:e9:f8:57:53:05:b1:57:29:df:bc:53:0e:71:51:aa:
         ed:ef:c5:77:61:d1:a9:4e:b2:29:25:71:82:b9:50:e5:ef:f6:
         ea:1f:9f:8c:57:71:8d:c0:58:bb:5e:b1:10:e4:2b:23:51:4e:
         9b:3c:43:6e:a4:27:f5:46:af:b1:0d:62:88:61:c6:db:e3:ca:
         db:67:42:55:72:d7:27:88:33:b8:6b:29:50:99:17:8c:f9:f8:
         83:3a:77:fd
-----BEGIN CERTIFICATE-----
MIIDgDCCAmigAwIBAgIUM1eZ/Yek4VGqlI+X8Z0y0bAiw20wDQYJKoZIhvcNAQEE
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw
MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOthnp1LI8yOOdmsBwXaMjTeKt0vYu2HznxZxJ2OKHbR8mVg
kT97Y6QvUMTaEltxoJdPJs/nsgGEZ1f1hjZUaA8o8Op7yh4avH5nz/0UY+7BM5IB
cLwSa30sjQI0joUa5PWZtsjVGNkEpvVA/JZQ4j+HoNZyvqOjRYkHdNAunA2IEgKj
7xetLC1xZhGJP89Xdyh3cLsPObCxNJ3p96JWr1d+7UT4vng9KMUNNxUs9plOBXCu
xZlFpz+9g3lqo2f/cS1g4giRI0VAsUBS4TsdXdHpwrCxxPt8r5zBlfGlIxYZdZ/v
vrh5p/TFskeubRwVnCYPsg/sko1aecmeFuBwvO8CAwEAAaOByzCByDAdBgNVHQ4E
FgQUpoYUIqtA6AdfE2TzjWDeMLQLszEwHwYDVR0jBBgwFoAUxAEW5aAWECliZ3vR
IkJsbxUrr5YwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs
LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m
b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/
MA0GCSqGSIb3DQEBBAUAA4IBAQAdkOYJY3JrdWQMvN8dMBTWQDVnLdWRDXWW839S
4YT34pS1KVXuX31GagIxpdg6d+DjSmGidc7r/YdPVmMVtVVK503EjsdnpgsJ9qDF
8q/E+4yhXpJHF4es/RfZh9hs/YmEcoNx4Rm4zrLPFaA+XaMXxeDvjq/gxTSnNOxZ
gz5Ba/Zklk49J9B4Mli/eZV7LOXADwLfZP5RiWN86IxxRklL2QNv44Tp+FdTBbFX
Kd+8Uw5xUart78V3YdGpTrIpJXGCuVDl7/bqH5+MV3GNwFi7XrEQ5CsjUU6bPENu
pCf1Rq+xDWKIYcbb48rbZ0JVctcniDO4aylQmReM+fiDOnf9
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:57:99:fd:87:a4:e1:51:aa:94:8f:97:f1:9d:32:d1:b0:22:c3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:b2:cd:77:8f:be:c9:a5:17:ad:e5:ac:2d:b2:
                    c0:1f:33:5e:ed:d9:96:57:14:9b:a4:37:d8:a0:3d:
                    e4:2c:56:95:4d:75:68:4f:77:06:24:e0:0f:e9:b6:
                    de:6f:dd:a7:f6:93:dc:f3:48:10:fa:fb:90:b5:43:
                    42:0b:9d:d7:e9:0c:2c:69:7b:3a:4f:73:31:00:0c:
                    ba:15:cc:dd:77:a6:a9:f9:21:b8:97:aa:b7:a4:99:
                    6c:08:a0:8e:9f:b8:29:47:df:db:b9:b0:39:e5:4f:
                    be:47:2f:93:76:5b:6b:02:fe:ec:66:31:c2:de:8e:
                    0a:67:89:a4:70:cb:32:40:db:63:00:57:40:b4:8e:
                    b8:24:e4:de:33:62:24:7a:e5:b2:18:41:54:f7:98:
                    d9:f5:c8:23:1e:88:5a:a6:1c:7e:92:0f:92:56:49:
                    0e:5a:dc:49:4b:d1:f8:1b:73:b0:31:6f:37:7e:cf:
                    91:f4:40:e6:8b:36:11:fb:0f:79:ea:d2:80:f5:8e:
                    c1:24:d2:fe:2f:c1:58:6d:32:2e:04:64:b2:20:d2:
                    cd:a1:79:8b:08:25:8f:1e:89:fe:43:3f:bf:de:49:
                    f2:fa:bb:d7:52:6e:19:8f:4c:b6:6e:4f:59:48:63:
                    e2:c9:55:0f:58:89:93:85:e0:58:ee:80:16:5f:c4:
                    77:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C4:01:16:E5:A0:16:10:29:62:67:7B:D1:22:42:6C:6F:15:2B:AF:96
            X509v3 Authority Key Identifier: 
                keyid:C4:01:16:E5:A0:16:10:29:62:67:7B:D1:22:42:6C:6F:15:2B:AF:96

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         8e:c0:27:58:f2:8e:5d:df:b6:dc:96:31:86:91:db:e6:51:d5:
         ff:e4:e5:c8:3b:be:5a:5c:7f:3a:8b:71:de:ab:19:c6:08:6f:
         98:03:d1:4a:b9:ad:aa:c4:08:99:3f:3f:3e:23:f6:44:92:f2:
         81:8f:e4:98:30:e4:c3:89:71:4f:58:91:37:a4:dd:e7:99:04:
         59:df:ca:1f:da:c5:2c:4f:42:31:5c:ad:9c:67:bc:39:27:89:
         e4:6c:1f:82:e5:a9:99:7d:1e:61:58:94:8f:a5:35:e2:54:34:
         13:fc:2c:c7:9c:17:0e:38:f8:7e:99:84:72:c8:3c:a3:35:6b:
         c1:6e:e0:37:10:ce:17:35:fb:58:06:d8:0e:f6:06:ab:48:70:
         63:b6:bf:e8:64:ec:b6:dd:33:c5:2e:cc:58:ab:ad:4b:f4:aa:
         c0:99:4d:60:4f:40:5a:47:40:7e:25:d5:4f:34:cf:f7:3c:12:
         8f:1c:a1:13:b9:42:41:0b:39:ed:7c:5b:b1:a1:cf:d4:7a:ea:
         5f:b7:61:75:c8:bb:53:2e:f1:db:a1:c1:2a:77:eb:c0:70:cc:
         34:69:82:cf:ad:29:48:ec:52:1f:a7:ac:3b:77:37:ec:b0:80:
         93:33:5e:4e:ab:81:a4:d7:6d:24:16:0e:b7:28:c6:8c:e2:86:
         cb:b6:76:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----