[Created by: generate-chains.py]

Generates certificate chains where the intermediate contains netscape server
gated crypto rather than serverAuth.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b5:13:fb:79:d7:bf:0c:f5:4b:2a:50:4c:9a:68:d0:89:a0:f2:9e
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:af:a5:d9:15:56:dd:ec:b1:41:dd:34:36:48:
                    ab:5a:3f:2e:6a:14:16:38:1f:c2:ad:27:64:f2:72:
                    54:a1:81:73:9c:fd:3a:37:2c:64:f9:e2:0a:bd:0f:
                    74:9a:70:ea:9c:6e:c9:64:e9:92:a4:bf:9a:30:2c:
                    9a:8f:4c:eb:12:1e:58:08:f5:6a:4b:72:e0:a8:a9:
                    22:81:ca:cd:7c:78:cd:24:9b:90:8a:7d:ac:79:cf:
                    40:a9:d0:f6:a4:78:ef:fd:c3:b3:9d:d3:ea:51:ee:
                    c7:ed:f5:2b:36:5c:50:11:be:44:a9:29:cd:d6:79:
                    bc:bd:5b:a5:46:d1:a7:86:a5:86:2a:73:f5:ba:f9:
                    f4:5e:9c:94:9e:95:81:ec:42:f9:83:f1:4e:a6:eb:
                    c9:a1:3c:e9:97:80:cb:ee:4d:06:45:75:a7:38:db:
                    f2:a9:17:12:46:f1:99:1f:40:48:89:a0:bd:07:46:
                    a5:ab:11:03:fb:a5:2c:a2:c9:bc:f7:07:e5:9f:ce:
                    24:26:3e:a1:a8:ac:fe:ad:09:64:00:d9:da:3c:c8:
                    09:c3:bc:c7:64:b9:93:c2:b9:39:4e:3c:a0:7c:9c:
                    14:fc:e5:bd:1f:1e:fc:4d:e8:e5:aa:9d:ff:33:ed:
                    f7:10:0e:72:da:81:79:e9:1e:f3:65:03:b0:13:77:
                    30:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                63:59:54:71:BD:5B:C7:56:B3:FE:AE:DA:EF:DE:59:E2:60:69:B3:2C
            X509v3 Authority Key Identifier: 
                keyid:34:04:CA:F4:40:13:44:0C:86:E8:1F:47:3F:F0:E8:23:D6:EE:02:09

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:test.example
    Signature Algorithm: sha256WithRSAEncryption
         71:2e:c0:82:88:b5:f6:f0:83:ff:a6:86:d9:b4:ac:cd:01:46:
         8f:28:b7:00:ac:f9:68:8f:7b:60:4f:97:6d:5d:16:56:cb:92:
         20:35:d7:c4:4f:33:57:ed:0a:49:ba:b6:09:92:47:9d:db:dc:
         b0:3c:d7:75:c7:07:d5:61:fc:75:6c:af:11:81:6e:c9:af:c8:
         a1:fc:ff:3d:5e:81:69:c7:e7:aa:dd:0a:9b:ac:50:50:7c:39:
         81:1a:bd:cc:53:94:31:e6:5a:a9:0b:21:d4:c0:d3:d9:90:2b:
         52:c1:19:ee:03:ba:ec:9a:94:70:52:eb:a1:08:76:d2:dd:59:
         4f:ea:0d:20:68:f0:8e:49:12:2b:b3:92:bf:d2:00:ee:0f:4a:
         47:e2:73:4e:50:0d:7a:d7:22:d8:29:91:de:a1:fc:d4:84:df:
         d7:53:65:eb:20:f9:f9:24:15:ab:e6:fc:9b:17:c7:ab:9e:ee:
         9c:78:c8:9f:fd:8a:9a:7b:83:00:94:a4:ad:3b:a8:56:02:73:
         4d:21:57:7e:34:7f:b7:f3:d6:85:3e:23:55:9e:3d:31:38:d9:
         76:75:06:09:f0:ac:94:38:1f:a1:bd:4b:e8:c6:68:1c:78:a7:
         12:90:90:dc:66:10:3b:1f:82:0c:27:ec:9c:57:d5:9e:0b:f5:
         c3:be:1a:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e0:1e:36:75:40:12:16:19:8d:07:a8:3f:9b:ff:e1:59:bc:6a:a0
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:21:10:93:91:7b:75:0d:a8:b0:51:a1:b8:2c:
                    87:b9:1c:9f:63:63:7a:f5:03:a3:89:4c:5e:b5:03:
                    e9:50:32:c2:e2:30:68:9e:16:ec:ee:70:15:74:47:
                    0f:cd:ea:5d:61:28:1d:0b:3f:37:39:83:ae:f0:64:
                    05:83:15:e6:2d:cb:e9:69:1d:98:bd:3a:cf:25:f6:
                    21:a2:cf:e8:57:ac:bb:97:32:66:51:bb:c3:3f:4c:
                    f9:e8:ac:27:30:00:e5:e3:f5:64:f1:e4:f2:79:93:
                    6a:56:f6:99:28:81:f2:23:13:ac:97:e2:39:d0:80:
                    91:8e:f2:c5:30:cd:46:71:3c:88:ca:03:b5:74:a2:
                    dc:db:e1:ae:70:2a:42:b1:99:b8:d5:48:60:2f:1e:
                    da:d3:1f:27:8b:6c:12:40:3d:5d:eb:0d:e8:f0:e3:
                    f0:4a:8b:cd:74:62:e8:06:44:ca:d8:5e:2a:6d:09:
                    4d:7b:8e:47:1c:04:12:da:ea:e5:6f:6c:41:2c:23:
                    1d:39:83:d0:44:a5:7c:c6:13:0e:6c:73:2a:06:71:
                    4f:65:ba:b1:5e:db:d3:ec:ca:ae:40:5e:24:87:63:
                    2d:ae:4b:d5:f6:4c:25:fc:3f:d9:6e:96:65:c8:b2:
                    8b:1a:a3:ed:33:b4:3a:f3:cc:4a:c5:fc:66:81:3f:
                    89:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                34:04:CA:F4:40:13:44:0C:86:E8:1F:47:3F:F0:E8:23:D6:EE:02:09
            X509v3 Authority Key Identifier: 
                keyid:4E:42:54:6A:32:D3:BE:9E:70:41:47:41:3E:90:BA:86:3F:D4:FD:6C

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Extended Key Usage: 
                Netscape Server Gated Crypto
    Signature Algorithm: sha256WithRSAEncryption
         2a:ce:0f:b6:ca:5a:e5:cd:69:c9:1c:e7:55:f5:6e:08:2a:38:
         83:8b:66:35:20:fc:97:c4:af:e8:e8:5b:ca:c1:31:5a:55:83:
         b9:f4:d5:6d:ed:cd:a6:99:e6:56:b6:6f:32:63:b3:ec:be:a3:
         a7:9c:42:b9:f3:28:35:88:9c:dd:f7:cf:1c:c8:3f:f0:11:ac:
         d7:58:03:3c:f6:16:4d:17:7a:df:52:c5:e8:eb:cd:82:56:d7:
         6b:9d:28:70:a8:a6:1b:73:c1:36:bc:b6:37:79:fe:ba:12:34:
         7b:8b:42:a7:08:5b:d9:52:f6:be:02:b5:c1:8e:74:e2:e8:5b:
         f9:8a:f9:2e:d3:d6:c7:c7:14:0f:a2:43:a7:5c:f2:7c:eb:d8:
         70:f0:d8:89:a2:e8:de:b3:07:43:20:b0:c4:22:a7:a5:3d:0d:
         69:4c:78:da:80:eb:8f:54:e3:8a:a0:50:ff:7d:0d:88:84:a5:
         39:0b:de:74:5d:d7:7a:10:23:f3:ea:72:4f:29:eb:5f:5b:d8:
         bb:5d:bf:d2:8e:c5:84:41:3c:5a:55:60:39:58:54:55:db:6c:
         52:ea:ec:13:4d:ff:63:af:30:85:60:5c:2d:cc:e3:d4:97:78:
         78:ea:90:db:d8:a3:94:c6:84:ce:ed:3d:37:bf:f0:4b:72:0b:
         6b:af:e2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e0:1e:36:75:40:12:16:19:8d:07:a8:3f:9b:ff:e1:59:bc:6a:9f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b0:53:05:80:84:a4:62:d7:02:96:95:55:ad:
                    63:c9:cd:d7:46:41:1a:cb:b7:0d:6c:70:75:05:e6:
                    ea:a8:f6:64:dd:9e:b8:f7:a3:da:05:50:14:ad:0b:
                    fd:1f:8d:7f:d0:03:ce:ec:7d:de:f3:5e:eb:8b:f0:
                    db:98:70:cc:c2:c0:a9:f7:2c:e7:27:04:a5:79:10:
                    47:6d:a7:80:22:ba:0e:0b:28:e5:2a:f1:69:14:a2:
                    dd:a4:a8:ac:67:76:a0:db:8b:78:c0:0b:7e:2c:9c:
                    65:f6:e5:40:b7:c0:ca:b3:f0:1e:74:69:77:45:38:
                    e1:8c:de:c9:1f:fc:67:28:ee:22:ae:4d:3d:8c:6b:
                    63:62:9f:bf:ef:67:7d:e6:ee:a4:d7:41:c2:62:c5:
                    f2:3c:49:af:f9:44:74:b4:a7:26:f8:bd:ed:57:ec:
                    ed:16:2c:42:77:3d:85:69:e8:48:7e:d7:70:05:21:
                    b9:15:96:0b:5a:5d:ac:ee:64:46:1b:4c:eb:58:b0:
                    fd:48:fe:c1:02:e7:d0:c0:0b:52:aa:e7:51:9c:93:
                    91:46:05:ed:23:2e:c3:0b:0e:50:0e:6e:38:ac:31:
                    69:7d:70:d2:40:dd:7d:41:3e:08:31:78:c6:e3:57:
                    1d:c5:53:e7:91:6d:de:bc:de:3f:2e:72:de:e2:a0:
                    63:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4E:42:54:6A:32:D3:BE:9E:70:41:47:41:3E:90:BA:86:3F:D4:FD:6C
            X509v3 Authority Key Identifier: 
                keyid:4E:42:54:6A:32:D3:BE:9E:70:41:47:41:3E:90:BA:86:3F:D4:FD:6C

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         a8:4b:3f:7e:08:b6:f1:fa:4d:96:d4:b5:49:10:15:b1:5d:bb:
         4a:ae:21:f9:e6:cc:22:50:d5:0b:24:5e:6a:e3:b1:5d:85:8b:
         91:39:61:41:dc:ac:80:b4:14:d2:32:11:dd:18:48:1d:cc:fd:
         63:72:22:d0:30:53:e5:c5:2d:00:fe:58:de:25:a2:99:ab:03:
         39:a8:f8:0e:32:02:8b:de:ea:bc:5b:e3:4f:ad:b9:05:8b:80:
         f5:9d:ae:0f:59:80:10:e3:eb:50:6d:75:43:9b:f7:d0:4f:32:
         7c:a6:46:22:51:25:01:60:15:a6:ad:91:23:c7:e5:b5:d4:e5:
         37:cc:8b:4a:ea:ae:22:ca:64:b2:04:ed:bf:ff:93:8b:44:09:
         f2:06:42:81:a2:46:cd:2e:bd:26:87:a6:60:47:e3:80:c4:e1:
         9c:ee:74:37:6c:56:34:32:c9:83:01:79:08:7a:d4:c3:75:38:
         a0:6a:11:4b:b0:22:f1:bc:c9:27:a2:56:ab:2a:b5:eb:06:77:
         cd:08:c0:94:73:43:85:9a:1f:8b:b6:78:b8:9c:d0:ef:79:19:
         ee:9e:af:9d:6d:0d:c8:3c:b8:cb:c2:5b:9c:90:b8:ce:6c:61:
         03:75:e4:3a:7e:28:b6:be:10:5a:11:a3:28:43:90:18:80:b3:
         6f:71:9e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----