[Created by: generate-chains.py]

Certificate chain where the intermediate sets pathlen=0, and is followed by
a self-issued intermediate.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c3:57:03:79:49:32:ce:56:f8:86:e8:81:fd:69:ad:fa:5f:fe:8d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:86:21:26:6b:16:22:36:2b:5b:b1:d4:52:
                    28:74:2d:76:f3:1b:3b:01:17:dd:e1:18:e3:02:06:
                    a7:88:93:ad:32:59:53:ff:5d:c5:cd:1a:78:70:fb:
                    2e:d9:ba:f9:fa:75:53:fc:02:a8:3c:9b:e0:f4:50:
                    00:4f:30:0b:b3:d6:04:6a:b6:ef:85:0b:42:35:29:
                    77:fa:91:16:0e:ed:34:8a:f3:d2:5e:e9:66:66:57:
                    9b:6f:71:30:16:88:18:7a:f3:fc:61:79:06:d5:e8:
                    b9:18:d6:b9:20:bf:b9:9a:dd:c5:de:64:7d:44:fd:
                    3f:2a:a0:23:31:4d:a7:4c:42:65:ad:9b:38:b6:35:
                    51:f7:4a:58:84:b3:92:cb:98:36:a3:92:0c:33:85:
                    64:18:f2:06:c4:11:a6:12:a9:7c:da:ea:36:59:90:
                    9c:87:a4:60:39:9d:29:e3:21:91:c4:ae:9a:f9:f2:
                    ec:ad:f8:44:55:5c:3a:21:52:81:58:a1:e0:3a:5b:
                    9e:2d:61:62:7f:51:58:44:87:80:41:00:e9:6c:ed:
                    a7:ff:a0:7c:b4:17:33:7c:78:54:ca:92:81:d1:56:
                    75:b1:3a:b7:27:6a:77:e8:0c:30:71:bd:db:b1:06:
                    19:e9:d6:99:d6:41:d2:c6:90:3d:72:31:fc:e7:03:
                    38:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BF:95:3A:85:28:C1:82:8F:C9:0C:81:29:EA:8A:F8:1E:73:80:F8:7F
            X509v3 Authority Key Identifier: 
                keyid:0C:50:93:FA:6E:53:C4:76:18:87:E2:39:87:0B:AA:8E:31:01:3D:69

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         9c:55:d5:9d:57:7c:98:5c:81:7d:0d:c6:8a:93:d7:86:87:a3:
         4a:d1:e8:51:05:b7:3f:b3:47:67:ed:75:01:93:13:db:a7:84:
         d4:86:9f:5d:66:c0:b4:cc:65:8f:a0:b3:88:2c:6b:20:c4:55:
         81:3a:33:0c:cd:cc:6a:43:a0:e3:3f:98:f5:c0:73:f9:91:2d:
         7d:2c:58:9c:49:1f:b8:8f:b9:68:ef:18:eb:a7:43:84:c7:fd:
         a8:bd:bc:cd:9c:64:dd:1b:c8:4e:b6:ab:29:64:fb:fb:93:f5:
         03:e1:67:fe:94:85:25:7a:92:de:a6:fb:b2:e5:8e:56:25:c0:
         bb:0c:13:e6:f3:ae:83:ff:19:3a:e5:11:47:53:c5:8c:d8:3f:
         29:71:f8:82:a7:62:6a:e4:f3:82:6f:ae:19:d7:1e:3b:29:45:
         4f:54:9a:8e:cf:1b:1d:72:3c:f0:68:4c:d5:ae:ca:f2:34:22:
         6b:1a:30:56:76:15:2d:79:10:33:28:05:9e:4a:a3:02:fe:f0:
         cd:cb:27:4c:63:26:e2:8c:4d:de:f2:cc:af:39:df:82:c8:51:
         9b:58:c5:15:37:03:c4:5c:86:a2:7c:43:8a:90:b5:19:f1:3b:
         0e:09:53:99:5d:d4:61:9d:79:8e:a1:f9:b2:8c:f5:d0:59:4e:
         0e:a0:15:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c3:57:03:79:49:32:ce:56:f8:86:e8:81:fd:69:ad:fa:5f:fe:8c
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:84:14:6c:0b:68:76:9e:7d:d5:f7:55:ac:
                    5a:2b:6d:71:ad:aa:34:2a:dc:b4:b0:c2:37:23:5b:
                    05:01:08:b6:9b:fb:97:ce:3c:eb:fe:2f:b2:5e:6b:
                    07:bb:5f:29:fb:b1:25:55:5c:dd:9f:de:89:bd:29:
                    37:e8:a7:8a:99:c3:50:82:32:10:bb:2d:19:bc:a8:
                    47:21:3d:0a:66:b6:8d:ab:42:3a:94:50:7f:c3:19:
                    7f:ea:28:89:c2:9d:a8:87:d5:1b:42:63:9a:9f:9e:
                    06:72:41:ee:64:ee:ac:1e:21:f6:3e:3d:e5:f6:d1:
                    04:dd:7e:61:cb:e5:65:99:c1:49:97:13:c4:11:96:
                    3b:62:f0:46:ad:20:5d:52:5c:16:d6:59:29:e2:9e:
                    91:15:f1:23:0d:fb:3c:86:90:50:05:2d:63:81:cc:
                    39:25:62:cc:00:18:b4:0e:1a:a0:d8:ca:4b:e0:b6:
                    ea:33:83:8a:2e:ab:6c:6f:41:9e:ec:43:92:d1:83:
                    b6:d0:45:e7:a8:8d:28:6b:a4:b5:f7:53:8b:8a:dc:
                    3e:b0:df:9f:d4:70:4e:c2:2c:1a:a5:4d:6c:5d:2e:
                    94:35:84:b9:5d:e9:df:22:fd:55:6e:05:ff:eb:b6:
                    10:0c:28:a3:5b:49:c1:98:63:8f:5d:fa:83:4e:11:
                    cd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0C:50:93:FA:6E:53:C4:76:18:87:E2:39:87:0B:AA:8E:31:01:3D:69
            X509v3 Authority Key Identifier: 
                keyid:4E:47:5F:93:57:FE:5F:F3:92:73:A6:6A:55:7C:1A:FB:F9:16:85:36

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: sha256WithRSAEncryption
         82:27:3f:71:ed:f7:ca:7d:61:8f:ab:fc:5e:69:b4:c5:3c:d4:
         fd:b0:c3:07:d3:31:57:37:de:f6:d7:8b:96:fa:43:af:53:ac:
         93:08:58:47:ad:b1:0e:ab:6b:ba:43:b3:30:41:09:bc:e1:32:
         ee:dd:d1:5c:2c:2c:d8:60:98:d6:97:e9:e4:af:e1:4e:61:1f:
         64:e7:2a:7d:77:6f:ee:5f:e1:29:99:aa:06:fe:ba:d9:56:16:
         ab:5d:94:53:54:15:6e:fa:aa:fd:d7:d7:89:cf:cb:cf:7d:ae:
         0b:b7:35:56:b8:84:7b:69:ad:97:43:08:db:ab:5a:dc:76:19:
         63:79:91:d4:0a:8f:10:15:19:06:e8:7a:9b:1d:f2:5b:56:d2:
         36:76:25:78:c8:8f:5d:17:24:ce:59:2a:fc:49:8b:b8:d2:97:
         c9:57:2d:7b:bd:d6:94:a7:70:81:ef:07:55:65:a0:ee:4c:78:
         c8:52:f6:d9:e5:f1:13:15:7b:79:d0:ba:a2:d2:da:e2:ec:3f:
         e8:3a:0a:d8:8d:5c:b9:c5:bf:6e:98:c3:90:42:ca:2f:64:15:
         19:7d:21:b3:79:0f:ee:22:ec:2c:50:25:2b:b5:cc:4b:36:94:
         42:c8:cc:b6:6c:b2:2e:ab:be:7c:55:b1:8b:cb:37:26:88:60:
         34:b4:30:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:35:95:e6:ac:68:24:65:1f:52:3f:6e:18:3b:86:7c:da:73:de:30
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6c:3c:e9:bb:09:74:83:4d:d6:c8:58:96:d9:
                    3b:ee:6d:f2:fd:9e:11:e5:80:e5:35:50:51:70:0d:
                    95:a9:f9:0e:96:df:33:db:94:6f:a3:7d:2a:80:d2:
                    a4:3b:fa:34:e0:bd:44:e5:07:a6:09:02:40:3b:6f:
                    11:a7:54:88:0f:22:09:58:27:97:4a:7f:55:e3:03:
                    5c:c2:13:fb:62:4b:0b:b0:fb:5b:20:c1:57:fc:a4:
                    32:4d:97:71:f7:5c:f1:63:6c:21:7b:a8:6e:ce:9f:
                    e5:50:66:40:b1:e9:23:df:52:b4:b6:de:aa:99:75:
                    f0:d2:ec:26:60:37:89:c9:a2:dc:b0:f5:33:e9:0e:
                    0f:0e:bd:f3:72:65:1e:4f:9c:c6:1b:32:34:98:de:
                    04:c0:dd:28:24:ec:f7:dc:e5:54:7a:a5:1a:b0:1a:
                    31:96:d3:43:f0:df:4b:52:41:9c:8e:34:22:50:fc:
                    44:bb:a5:fb:c0:c5:59:8a:bb:32:42:29:fc:73:cb:
                    a1:85:54:7f:5a:db:bd:ec:0d:99:76:c0:c5:72:9f:
                    0d:28:e9:ca:65:9f:a1:69:b6:07:20:01:64:c7:03:
                    0f:ff:ab:a1:f1:df:5b:a4:da:7e:e5:79:68:19:a2:
                    63:e0:87:37:05:5d:f7:88:5d:11:c6:1d:d8:18:0a:
                    0c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4E:47:5F:93:57:FE:5F:F3:92:73:A6:6A:55:7C:1A:FB:F9:16:85:36
            X509v3 Authority Key Identifier: 
                keyid:A0:D4:A1:BC:4B:2D:3E:83:D7:0D:0C:E2:BE:E6:3A:C5:40:4D:4E:DC

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
    Signature Algorithm: sha256WithRSAEncryption
         8d:b7:ee:8c:7d:30:ae:33:67:92:b4:d8:cd:32:d7:9e:45:fb:
         cc:b3:fa:ae:ad:19:d0:ad:96:be:6c:be:1d:91:11:e2:b1:f4:
         a7:76:56:52:23:5e:93:dd:ec:a5:fa:72:05:7c:f9:a2:8b:aa:
         66:c4:c5:e3:6f:0b:fe:6d:40:8e:01:ba:64:30:2f:6f:1b:7b:
         78:1d:c0:08:a2:e3:6d:03:d7:f8:53:80:e3:7d:62:27:0a:5b:
         d2:59:bb:e7:93:41:62:ce:d3:85:0c:46:88:01:98:1f:2f:57:
         31:2b:aa:b5:63:64:37:40:d6:10:06:62:cc:e1:8b:f5:b3:28:
         0f:80:2f:7f:5f:cd:89:f9:b1:3e:c9:cf:91:45:e7:9d:4a:fc:
         e2:b7:1c:61:42:75:ce:3a:cf:57:d3:e4:ed:c9:40:79:4a:9d:
         70:98:4c:b5:77:1a:26:de:32:88:0f:f5:9f:1e:96:24:b4:b1:
         2d:f5:52:16:35:49:20:77:c1:6d:05:ee:c4:c4:c5:81:dc:c0:
         34:d8:95:17:79:51:ef:1b:f9:e3:1c:36:db:b7:cf:ea:f3:a8:
         25:69:74:06:e4:76:e2:11:46:65:ca:d3:13:c6:3c:49:a5:e1:
         d1:43:72:a6:d7:a0:fb:dd:a8:7e:3a:01:c9:ae:5a:cd:ef:d6:
         70:a0:6e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:35:95:e6:ac:68:24:65:1f:52:3f:6e:18:3b:86:7c:da:73:de:2f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:61:1e:7e:20:61:c0:eb:1c:13:ee:75:3c:36:
                    f0:5d:4b:ef:d2:83:20:1b:d5:bb:6e:70:cf:2f:4a:
                    4e:13:b1:a7:66:9c:19:fe:7f:5c:69:85:0a:64:3e:
                    05:4e:a3:71:bf:70:70:9a:dd:45:18:14:9b:b6:40:
                    39:75:24:67:c3:bf:18:60:be:c9:b4:07:a9:81:f7:
                    1b:d9:4c:96:66:eb:dc:ef:7b:fd:c5:27:68:fd:9b:
                    94:7e:52:ac:ac:4e:65:60:7b:12:d4:6a:de:0f:81:
                    cc:3c:cd:cf:39:f5:f5:28:9f:e1:ee:65:02:66:f8:
                    0d:df:b0:20:45:03:13:16:d2:c7:f2:f7:c9:c7:c9:
                    0d:03:d0:ec:5c:79:a4:54:99:e5:62:52:6c:aa:83:
                    df:42:d5:f7:83:29:ce:90:32:06:71:80:78:e1:fb:
                    a6:d4:25:02:c5:b1:bd:43:68:fa:8d:c6:cc:10:18:
                    02:58:3d:32:df:65:a8:47:75:cb:88:0e:fa:0e:33:
                    60:bd:d1:fe:0c:e4:29:60:f3:28:fb:91:45:f3:ba:
                    b7:fc:ec:63:ba:b9:2d:4e:fc:95:8e:3d:fb:9d:87:
                    dd:0b:5c:ff:a8:75:3d:66:2c:cd:ec:4a:fd:c8:24:
                    4b:0f:a9:0d:aa:81:69:56:00:c4:ef:97:e1:7d:38:
                    6f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A0:D4:A1:BC:4B:2D:3E:83:D7:0D:0C:E2:BE:E6:3A:C5:40:4D:4E:DC
            X509v3 Authority Key Identifier: 
                keyid:A0:D4:A1:BC:4B:2D:3E:83:D7:0D:0C:E2:BE:E6:3A:C5:40:4D:4E:DC

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         52:9f:87:f1:5d:10:cb:b1:55:03:b6:91:dc:36:92:a1:c0:74:
         7b:3d:4a:fc:6a:59:ca:b9:80:02:05:3d:4c:bb:f1:89:22:2a:
         1d:76:f5:ab:b4:73:de:fb:ff:52:1b:ed:c6:e5:86:9b:b6:21:
         85:0f:d0:0e:d9:1b:55:59:fb:ea:cc:e3:c4:a7:98:84:2d:1b:
         94:c6:01:2e:54:55:5e:27:ed:9e:6a:63:0e:50:b4:4e:6a:f8:
         84:5b:62:ed:a3:4c:a8:78:a3:59:d0:32:ac:47:c5:c1:2b:8f:
         3d:1e:93:05:31:e3:12:ce:97:53:18:47:00:de:fc:0e:2b:47:
         77:b7:19:8e:f9:5d:f0:99:a0:fc:f5:63:7f:2c:ae:60:21:09:
         50:1c:1f:c5:e3:32:18:70:f7:a0:fe:14:10:de:0a:72:8a:e9:
         5e:4e:45:74:dc:11:30:74:6a:88:f2:85:96:d3:f1:25:14:66:
         36:fa:97:06:8a:06:07:e8:4c:7f:22:e0:87:4f:d3:1b:39:29:
         74:11:a4:d0:21:e1:0d:38:14:c9:78:12:41:d4:01:8c:ea:e6:
         f6:cf:ac:13:2e:53:5d:a3:62:43:69:07:08:e4:cf:0a:4f:e0:
         98:52:82:35:2a:16:c8:c9:5c:09:f7:ff:bc:f1:4d:89:42:ba:
         43:8b:29:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----