| [Created by: generate-chains.py] |
| |
| Certificate chain where the target certificate contains an unknown X.509v3 |
| extension (OID=1.2.3.4) that is marked as critical. |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 4e:9a:ac:ff:32:38:c0:2f:b6:e5:63:63:94:45:6d:aa:aa:c4:b6:e5 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Intermediate |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Target |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:bd:05:ea:3a:1c:14:a1:db:ad:2c:18:3d:25:9c: |
| dc:1c:0f:2b:1e:42:df:c2:7c:b4:39:e6:4b:45:eb: |
| d3:a2:1c:2b:dc:f2:8c:08:f5:81:df:bd:fa:a2:1a: |
| 1c:5c:99:cb:00:c7:31:02:c8:44:5f:31:cf:9c:82: |
| 6d:3c:0c:5d:f7:d6:cc:91:fe:f3:e7:7a:08:17:85: |
| d5:75:61:ee:dd:66:55:3c:e2:68:98:36:19:20:e4: |
| 9b:cd:24:6c:a3:5d:89:84:80:2e:c7:11:4e:c1:82: |
| b2:80:ce:0f:e9:6a:42:54:10:fb:c0:0a:53:be:19: |
| 01:38:ba:06:c5:93:93:1c:84:aa:25:c7:c5:9a:4d: |
| 32:2e:a4:13:5e:6d:07:d6:9d:e5:b0:29:63:da:14: |
| b7:62:51:63:93:dc:28:ae:4a:bc:35:ac:c0:06:ea: |
| ea:0b:d5:70:61:3b:05:78:e4:d3:ad:c3:ad:95:f1: |
| 48:e5:79:a6:dc:12:1f:14:4f:21:9f:ca:6f:7a:dd: |
| d6:45:c8:8a:60:96:1c:02:06:16:18:80:21:58:6a: |
| f6:83:3e:1a:98:b8:b2:a9:22:44:c2:25:e9:dc:a9: |
| aa:bf:1d:2e:3f:2e:a1:78:08:93:04:4c:c4:1f:f9: |
| b3:34:9f:a7:78:5b:02:a6:ca:d3:1f:fa:ba:4d:34: |
| a2:bb |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| D6:55:4E:AC:07:84:35:A9:0D:9A:63:45:82:73:4E:A4:CC:53:B0:02 |
| X509v3 Authority Key Identifier: |
| keyid:8A:E3:E6:F6:58:6F:1C:90:B4:67:A5:14:D8:64:E7:F7:00:77:61:01 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Intermediate.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Intermediate.crl |
| |
| X509v3 Key Usage: critical |
| Digital Signature, Key Encipherment |
| X509v3 Extended Key Usage: |
| TLS Web Server Authentication, TLS Web Client Authentication |
| 1.2.3.4: critical |
| .... |
| Signature Algorithm: sha256WithRSAEncryption |
| a8:13:5e:72:31:d7:35:54:3e:a3:b3:ad:16:98:43:4d:ac:22: |
| 4d:42:9e:1d:f2:98:3e:ff:cd:ab:be:a8:6e:18:0a:12:76:2a: |
| ac:f6:63:da:09:9c:a3:78:66:19:14:eb:f5:aa:83:bc:0f:f6: |
| af:54:41:43:f1:4e:68:65:b3:ca:73:aa:e0:e3:b6:16:5b:cf: |
| 0d:eb:37:76:c7:18:af:3c:92:db:c5:6a:64:d2:30:94:bb:59: |
| cf:95:06:3b:94:81:e9:1e:6e:6b:ff:53:97:d3:ed:99:42:5e: |
| 1e:82:2c:ac:20:cc:39:90:88:d0:44:07:14:df:8f:66:0d:7a: |
| d9:5a:9b:78:6b:5c:dd:f6:29:ea:77:ff:86:63:4e:60:45:63: |
| d8:c3:3c:33:d0:e5:ca:e9:af:a5:0f:f1:f9:aa:5f:65:fe:1d: |
| 3b:e2:a9:94:27:25:a9:64:0b:a0:52:91:d7:1e:63:77:a1:d3: |
| 4c:d2:b3:65:99:3a:5a:f2:7b:92:c6:f6:f0:21:9d:ea:23:90: |
| f0:36:72:af:ce:d3:93:ab:06:29:9a:e7:9f:ed:67:64:f2:61: |
| 2c:9e:12:da:0e:f0:fc:1f:7b:11:3c:0e:d4:60:e6:7b:30:1f: |
| 51:eb:8c:55:68:84:23:87:6f:c0:36:c3:a1:26:10:a8:16:b9: |
| 30:75:dd:f8 |
| -----BEGIN CERTIFICATE----- |
| MIIDsDCCApigAwIBAgIUTpqs/zI4wC+25WNjlEVtqqrEtuUwDQYJKoZIhvcNAQEL |
| BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTE4MDMxMDEyMDAwMFoXDTIx |
| MDEwMTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF |
| AAOCAQ8AMIIBCgKCAQEAvQXqOhwUodutLBg9JZzcHA8rHkLfwny0OeZLRevTohwr |
| 3PKMCPWB3736ohocXJnLAMcxAshEXzHPnIJtPAxd99bMkf7z53oIF4XVdWHu3WZV |
| POJomDYZIOSbzSRso12JhIAuxxFOwYKygM4P6WpCVBD7wApTvhkBOLoGxZOTHISq |
| JcfFmk0yLqQTXm0H1p3lsClj2hS3YlFjk9workq8NazABurqC9VwYTsFeOTTrcOt |
| lfFI5Xmm3BIfFE8hn8pvet3WRciKYJYcAgYWGIAhWGr2gz4amLiyqSJEwiXp3Kmq |
| vx0uPy6heAiTBEzEH/mzNJ+neFsCpsrTH/q6TTSiuwIDAQABo4H5MIH2MB0GA1Ud |
| DgQWBBTWVU6sB4Q1qQ2aY0WCc06kzFOwAjAfBgNVHSMEGDAWgBSK4+b2WG8ckLRn |
| pRTYZOf3AHdhATA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91 |
| cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0 |
| dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIF |
| oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDKgMEAQH/BAQBAgME |
| MA0GCSqGSIb3DQEBCwUAA4IBAQCoE15yMdc1VD6js60WmENNrCJNQp4d8pg+/82r |
| vqhuGAoSdiqs9mPaCZyjeGYZFOv1qoO8D/avVEFD8U5oZbPKc6rg47YWW88N6zd2 |
| xxivPJLbxWpk0jCUu1nPlQY7lIHpHm5r/1OX0+2ZQl4egiysIMw5kIjQRAcU349m |
| DXrZWpt4a1zd9inqd/+GY05gRWPYwzwz0OXK6a+lD/H5ql9l/h074qmUJyWpZAug |
| UpHXHmN3odNM0rNlmTpa8nuSxvbwIZ3qI5DwNnKvztOTqwYpmuef7Wdk8mEsnhLa |
| DvD8H3sRPA7UYOZ7MB9R64xVaIQjh2/ANsOhJhCoFrkwdd34 |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 06:66:51:84:c2:7e:fc:0c:cf:05:27:4c:bc:d3:55:23:ed:cb:19:f9 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Intermediate |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:b8:cf:91:dd:b5:74:07:ba:8a:93:3c:ca:0c:11: |
| 5d:36:29:ec:53:1e:32:8b:90:ae:f9:c0:db:d2:7e: |
| 78:ea:3c:58:57:5f:70:4a:96:9a:93:58:d3:7e:42: |
| 60:bd:78:07:38:6b:e4:16:8f:32:17:30:b1:76:95: |
| 56:6d:7e:e5:9e:f9:0f:f8:5a:99:ee:80:e1:e6:fc: |
| d6:af:33:61:aa:da:19:98:7f:da:27:2f:80:bc:96: |
| 2e:51:81:f8:1a:63:27:0b:ce:ee:02:16:55:4a:96: |
| 0a:c5:c1:7e:99:95:e8:70:e7:4d:2b:2f:bf:d3:d2: |
| 2d:25:7d:0f:b2:50:96:36:95:e5:2c:ca:0e:59:b5: |
| d4:7c:31:57:96:fa:be:c6:d5:9a:83:b5:96:f2:1c: |
| 4a:20:cf:be:0e:7f:42:4f:a7:b4:5b:e2:01:f4:ed: |
| 59:c4:6e:51:a1:a5:aa:a7:1f:04:ce:e0:d2:2c:ff: |
| a3:74:c7:e4:2a:a8:d2:7f:cd:f1:56:86:67:fe:75: |
| 22:05:f7:2d:3b:3b:ce:5c:b9:95:4e:e5:ca:d8:89: |
| f6:b3:12:27:b4:22:6b:fb:83:f9:0e:de:a8:be:38: |
| 5b:15:66:81:3b:62:d7:50:12:29:69:5b:c5:5a:99: |
| 97:aa:51:c3:36:88:97:c9:c1:90:53:4f:b3:ec:99: |
| 3c:f3 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 8A:E3:E6:F6:58:6F:1C:90:B4:67:A5:14:D8:64:E7:F7:00:77:61:01 |
| X509v3 Authority Key Identifier: |
| keyid:52:00:A4:BE:8B:5F:23:63:5E:31:05:87:F4:6B:50:A7:01:70:63:DA |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 5d:ea:42:56:51:61:2a:81:f5:b3:93:03:dc:91:88:3e:7c:22: |
| 8b:b0:13:e3:e2:b8:67:3b:ec:47:5b:d3:c6:c0:38:b1:bf:9a: |
| 21:ac:8b:d1:73:8c:14:ec:33:8d:53:23:4a:f0:82:7f:52:9c: |
| 05:2e:93:a3:3a:43:f1:43:03:24:2b:98:61:fd:05:03:ae:41: |
| 32:50:c7:cf:cb:9a:a9:b0:b6:0b:7d:cc:6a:63:67:39:03:0a: |
| 4f:b2:e9:7f:ac:8b:3b:ed:cb:22:31:8d:c3:9e:da:b2:84:e5: |
| 2f:a7:13:08:c7:d2:3b:cd:f8:04:76:57:d0:bc:42:9b:51:e7: |
| 90:e5:c9:8a:d1:2f:3d:14:71:fc:0c:cf:55:de:0b:02:b9:e1: |
| cb:7a:df:d6:e2:1d:9c:d5:a4:f8:d4:c4:5a:f3:8a:f3:1f:db: |
| c9:7e:eb:17:c3:d5:18:07:6e:4f:cd:4b:33:91:b9:45:a9:6a: |
| c1:dd:80:8c:ce:55:49:cf:5a:2a:fc:ac:48:3e:04:a7:a6:77: |
| 96:5b:d7:30:bf:24:1c:40:93:5b:99:bb:40:c1:76:16:32:47: |
| 5b:91:f8:e9:ae:a2:4f:81:d8:40:76:ed:ec:38:a2:ac:8e:5a: |
| 66:35:ce:be:89:fd:c8:dc:89:fb:38:ca:48:84:a6:2c:57:11: |
| 78:d3:69:73 |
| -----BEGIN CERTIFICATE----- |
| MIIDgDCCAmigAwIBAgIUBmZRhMJ+/AzPBSdMvNNVI+3LGfkwDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw |
| MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD |
| ggEPADCCAQoCggEBALjPkd21dAe6ipM8ygwRXTYp7FMeMouQrvnA29J+eOo8WFdf |
| cEqWmpNY035CYL14Bzhr5BaPMhcwsXaVVm1+5Z75D/hame6A4eb81q8zYaraGZh/ |
| 2icvgLyWLlGB+BpjJwvO7gIWVUqWCsXBfpmV6HDnTSsvv9PSLSV9D7JQljaV5SzK |
| Dlm11HwxV5b6vsbVmoO1lvIcSiDPvg5/Qk+ntFviAfTtWcRuUaGlqqcfBM7g0iz/ |
| o3TH5Cqo0n/N8VaGZ/51IgX3LTs7zly5lU7lytiJ9rMSJ7Qia/uD+Q7eqL44WxVm |
| gTti11ASKWlbxVqZl6pRwzaIl8nBkFNPs+yZPPMCAwEAAaOByzCByDAdBgNVHQ4E |
| FgQUiuPm9lhvHJC0Z6UU2GTn9wB3YQEwHwYDVR0jBBgwFoAUUgCkvotfI2NeMQWH |
| 9GtQpwFwY9owNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs |
| LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m |
| b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/ |
| MA0GCSqGSIb3DQEBCwUAA4IBAQBd6kJWUWEqgfWzkwPckYg+fCKLsBPj4rhnO+xH |
| W9PGwDixv5ohrIvRc4wU7DONUyNK8IJ/UpwFLpOjOkPxQwMkK5hh/QUDrkEyUMfP |
| y5qpsLYLfcxqY2c5AwpPsul/rIs77csiMY3DntqyhOUvpxMIx9I7zfgEdlfQvEKb |
| UeeQ5cmK0S89FHH8DM9V3gsCueHLet/W4h2c1aT41MRa84rzH9vJfusXw9UYB25P |
| zUszkblFqWrB3YCMzlVJz1oq/KxIPgSnpneWW9cwvyQcQJNbmbtAwXYWMkdbkfjp |
| rqJPgdhAdu3sOKKsjlpmNc6+if3I3In7OMpIhKYsVxF402lz |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 06:66:51:84:c2:7e:fc:0c:cf:05:27:4c:bc:d3:55:23:ed:cb:19:f8 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Root |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:c0:8e:83:7c:7e:0c:6a:e8:93:2c:f8:e6:80:17: |
| e6:2a:91:f2:1d:1a:b1:51:6e:3e:4d:96:bd:a1:29: |
| f3:bd:ce:46:17:dc:5f:ed:b7:33:d8:17:31:80:b1: |
| 12:f3:bb:86:1d:4a:a7:61:dd:51:15:a8:9d:50:25: |
| 4f:93:5b:8c:a6:43:30:a5:46:7e:80:74:51:17:66: |
| 61:ba:c0:9d:f5:53:e4:4d:02:58:a4:27:ac:ef:35: |
| eb:01:e6:0d:0f:a2:67:b3:95:1d:33:d3:70:55:6d: |
| 73:80:dd:c7:dc:21:c6:58:9a:7d:cb:e6:9d:e2:af: |
| 7f:14:02:7c:f8:45:ff:5c:74:7a:7d:b1:35:1f:74: |
| 0f:e7:0d:97:51:58:15:41:07:fa:12:99:2a:84:92: |
| 48:9b:08:ee:ad:26:37:15:3e:7e:7b:b6:1e:94:36: |
| be:b9:d8:b6:6f:27:71:13:d1:3e:b7:9e:9d:d6:1e: |
| e1:cb:7b:2b:ab:20:46:e0:08:9c:54:5b:c6:db:c2: |
| 57:d3:67:ee:00:cf:d2:cb:0b:64:31:a7:9c:97:f5: |
| 4b:37:db:7d:d5:dd:91:a7:ed:dc:0c:2f:9c:04:42: |
| 50:46:8a:59:d2:9c:10:d7:0c:25:d9:79:de:e1:4c: |
| 3d:4a:5a:3f:2c:6c:20:a1:60:9f:24:69:1a:0a:f9: |
| 6e:79 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 52:00:A4:BE:8B:5F:23:63:5E:31:05:87:F4:6B:50:A7:01:70:63:DA |
| X509v3 Authority Key Identifier: |
| keyid:52:00:A4:BE:8B:5F:23:63:5E:31:05:87:F4:6B:50:A7:01:70:63:DA |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| b1:46:a2:be:75:4e:8a:30:07:5b:fb:11:58:65:69:82:59:f5: |
| c9:f6:c4:96:b9:0a:f7:ab:e4:20:33:85:1e:7b:67:ca:b2:f8: |
| fa:ef:33:2a:4b:b9:34:d2:3a:6b:c0:b2:f2:49:7c:a9:92:c9: |
| 67:16:de:5c:f9:71:cb:2f:24:af:41:0e:c8:9c:72:fc:c0:52: |
| 2f:aa:ca:25:2f:39:86:b7:48:f1:bb:c0:9a:e5:0a:c6:31:46: |
| 48:ae:e6:2b:3c:3f:82:ca:81:7d:c3:e3:7a:66:05:ac:90:86: |
| 1d:a2:60:64:18:f0:94:90:93:f9:ae:f0:cf:9c:fd:af:59:20: |
| 12:ae:c9:f7:cf:d4:68:eb:66:cf:24:1b:82:d6:61:ed:f5:48: |
| cf:88:3c:24:b4:39:b2:69:da:44:5c:92:11:13:d7:79:9d:ec: |
| e6:7b:79:89:cf:09:47:e9:51:5a:b9:f3:47:0e:d3:6c:65:9e: |
| 70:1f:78:c8:ce:63:9c:aa:2f:81:04:93:3a:22:1d:a2:a2:03: |
| 4d:96:37:1b:8f:fc:df:e8:03:79:f2:57:6f:5b:26:e2:3c:4c: |
| ae:ba:46:2a:2a:6b:fd:aa:d2:c9:a6:be:59:db:ef:91:60:f3: |
| 35:e7:de:b4:bd:e3:00:f4:3f:3b:d6:a3:32:66:9b:05:8f:06: |
| 44:da:90:36 |
| -----BEGIN CERTIFICATE----- |
| MIIDeDCCAmCgAwIBAgIUBmZRhMJ+/AzPBSdMvNNVI+3LGfgwDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw |
| MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK |
| AoIBAQDAjoN8fgxq6JMs+OaAF+YqkfIdGrFRbj5Nlr2hKfO9zkYX3F/ttzPYFzGA |
| sRLzu4YdSqdh3VEVqJ1QJU+TW4ymQzClRn6AdFEXZmG6wJ31U+RNAlikJ6zvNesB |
| 5g0PomezlR0z03BVbXOA3cfcIcZYmn3L5p3ir38UAnz4Rf9cdHp9sTUfdA/nDZdR |
| WBVBB/oSmSqEkkibCO6tJjcVPn57th6UNr652LZvJ3ET0T63np3WHuHLeyurIEbg |
| CJxUW8bbwlfTZ+4Az9LLC2Qxp5yX9Us3233V3ZGn7dwML5wEQlBGilnSnBDXDCXZ |
| ed7hTD1KWj8sbCChYJ8kaRoK+W55AgMBAAGjgcswgcgwHQYDVR0OBBYEFFIApL6L |
| XyNjXjEFh/RrUKcBcGPaMB8GA1UdIwQYMBaAFFIApL6LXyNjXjEFh/RrUKcBcGPa |
| MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh |
| L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S |
| b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG |
| 9w0BAQsFAAOCAQEAsUaivnVOijAHW/sRWGVpgln1yfbElrkK96vkIDOFHntnyrL4 |
| +u8zKku5NNI6a8Cy8kl8qZLJZxbeXPlxyy8kr0EOyJxy/MBSL6rKJS85hrdI8bvA |
| muUKxjFGSK7mKzw/gsqBfcPjemYFrJCGHaJgZBjwlJCT+a7wz5z9r1kgEq7J98/U |
| aOtmzyQbgtZh7fVIz4g8JLQ5smnaRFySERPXeZ3s5nt5ic8JR+lRWrnzRw7TbGWe |
| cB94yM5jnKovgQSTOiIdoqIDTZY3G4/83+gDefJXb1sm4jxMrrpGKipr/arSyaa+ |
| WdvvkWDzNefetL3jAPQ/O9ajMmabBY8GRNqQNg== |
| -----END CERTIFICATE----- |
