[Created by: generate-chains.py]

Certificate chain where the root certificate is not self-signed (or
self-issued for that matter).

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8d:5e:30:60:e5:57:f6:f3:09:84:b2:6d:4f:a0:fb:9d:6f:5e:9d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:05:80:6e:cf:1f:63:66:cf:05:e3:dc:51:2c:
                    12:41:1f:96:f5:a5:94:96:c5:5e:34:36:bc:90:df:
                    85:73:5e:26:ed:f3:12:fb:90:a0:fb:05:b4:8e:05:
                    71:07:4c:cc:32:ae:95:89:87:8c:9a:08:22:f0:a1:
                    47:da:be:5c:12:c7:18:31:aa:19:61:59:3d:3a:7b:
                    e9:e9:1a:9f:56:d9:5b:31:b4:3f:bc:ad:da:1c:e9:
                    0d:dc:40:5c:4d:5d:8c:5a:ad:78:97:ab:cf:28:fb:
                    52:7d:74:6f:d3:27:da:5a:e4:37:7e:1a:56:8b:f3:
                    85:55:c5:aa:f8:96:3d:51:52:5f:be:60:47:97:fd:
                    82:ef:28:b7:cd:50:64:e2:70:43:7b:1f:5d:f3:9e:
                    d1:c2:dd:22:a6:08:85:94:e8:80:69:62:67:01:ed:
                    12:bb:96:96:83:b4:02:4f:5a:a0:33:63:99:e2:1c:
                    88:33:38:fa:b7:20:70:2d:91:e7:ca:27:9b:81:2f:
                    29:a6:d6:f0:ea:ec:7b:a4:86:61:56:af:bd:30:26:
                    91:e7:d9:18:e9:4e:90:6e:66:ab:1a:48:70:62:9d:
                    b9:0e:11:fa:49:d5:3c:8c:20:52:9b:b0:6a:71:85:
                    a5:92:66:22:ea:79:0c:53:b1:66:ab:82:3d:7c:16:
                    78:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7F:FE:A1:79:97:34:D7:6D:63:C2:1A:94:43:45:AE:6E:0D:30:5A:18
            X509v3 Authority Key Identifier: 
                keyid:1E:C9:1C:45:5F:46:A4:0C:10:15:82:7C:01:23:5B:21:F4:AE:88:D9

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         43:bd:99:ce:cf:cd:0d:9f:ca:dd:ec:8c:34:35:33:1d:13:a8:
         30:88:bf:61:5b:fd:c4:be:b8:93:3c:30:64:f8:00:d9:37:c2:
         00:df:14:ab:f7:a5:17:16:eb:34:b7:78:0b:2e:90:28:91:08:
         07:1e:ff:05:0c:bb:54:68:cf:b8:69:47:0b:e0:ec:6d:44:03:
         bd:a5:13:4e:d6:17:48:16:02:e9:eb:ff:76:f8:52:25:32:75:
         f4:33:70:82:fa:87:96:58:3c:96:bc:e8:8e:2e:19:8e:bc:2a:
         35:d9:d2:34:dd:63:ef:42:ad:12:f6:a2:1b:98:fd:9e:07:10:
         aa:32:a0:ca:cd:1c:32:45:be:60:bf:b1:bc:d3:6a:21:c2:b6:
         49:34:52:c4:6e:9e:21:54:35:5e:d6:ba:e9:05:26:44:0b:36:
         a8:9c:9c:06:22:82:a0:b4:37:9e:e6:8a:af:d6:98:bc:2a:2e:
         68:21:52:8b:f7:88:ad:d4:5b:00:66:5d:99:b8:fe:74:b1:a2:
         45:4f:c2:7f:b5:b0:05:7a:87:99:f7:1d:23:94:23:e3:b0:6f:
         ca:8c:04:58:26:85:a1:4d:e5:06:2e:5b:71:d1:c1:cd:d4:40:
         0b:f7:e5:99:d0:fb:00:d8:f6:b8:4f:ca:9e:ce:67:cf:26:72:
         22:ee:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:24:c9:62:9e:9b:f4:e2:b7:3b:f4:4d:c4:01:48:be:71:f6:09:ac
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:04:1a:b6:ce:13:85:6b:9b:9e:2d:2f:a5:
                    b4:b5:05:44:72:4b:8b:80:23:1e:0b:1e:1d:30:eb:
                    c0:f5:c1:a5:17:e6:13:5d:b4:2f:bf:7c:a9:95:38:
                    cc:88:9a:6e:26:e2:3a:22:68:fe:b1:a3:e4:70:04:
                    73:70:78:b7:68:7a:c7:0d:86:c0:ad:3c:a4:ad:83:
                    a5:00:a8:a3:c2:59:53:3a:77:33:c7:f2:56:15:1b:
                    85:7a:2f:b4:44:e1:40:5d:04:9a:ce:0c:4d:5c:33:
                    40:4c:68:de:b9:58:48:f1:b6:cc:a4:02:48:86:46:
                    66:32:0f:0e:3d:fd:fd:af:df:96:27:b1:60:5b:0d:
                    be:25:b5:dd:84:ec:f8:9d:da:21:44:95:df:46:16:
                    3f:77:69:8e:70:bc:9a:78:ec:45:89:13:0f:be:34:
                    7e:00:4d:83:cd:d3:f4:fe:3f:6c:ce:d0:6f:36:64:
                    6c:c1:61:dd:c2:68:1d:b9:78:2d:2d:0b:32:96:75:
                    3a:d6:a5:d3:3f:2d:55:0e:e7:9e:aa:7d:31:a0:4d:
                    ac:91:20:1e:46:41:85:3f:03:45:db:8f:98:c2:c2:
                    b8:7d:e1:f2:e7:b8:6f:a8:cb:b9:d6:7e:8a:29:98:
                    b3:b3:ed:38:a4:a7:fc:9d:c1:e1:63:68:00:64:a5:
                    e1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1E:C9:1C:45:5F:46:A4:0C:10:15:82:7C:01:23:5B:21:F4:AE:88:D9
            X509v3 Authority Key Identifier: 
                keyid:91:D7:20:C6:1D:00:21:35:53:7D:FE:50:11:02:DD:E3:40:2B:9A:A8

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         55:46:1e:a5:5f:50:b7:20:a5:23:78:bc:54:8f:78:aa:70:37:
         0d:91:10:14:65:80:6a:5c:c1:de:c5:30:cd:a2:83:b8:be:17:
         29:2c:b0:9f:56:fc:5a:0a:f0:55:03:ba:1a:63:68:b2:68:8d:
         27:e3:1b:19:47:6e:6d:c0:38:2e:11:9f:b1:b9:f9:bb:18:2f:
         cb:da:cd:ca:ac:4d:1b:18:ee:80:fa:df:af:76:5b:5d:62:45:
         97:b7:78:c6:d1:01:32:25:09:87:ec:e1:d2:86:05:ff:27:f4:
         9b:7e:bc:6e:b5:ba:0c:8e:b6:67:1c:36:0c:19:ad:bf:79:02:
         8c:87:fc:d3:de:60:49:5d:84:1e:dd:65:1c:45:22:5b:39:7b:
         a3:86:e0:b0:fd:82:0b:ae:05:08:b9:f9:ba:17:49:c1:da:55:
         34:d8:37:b2:89:67:fc:c8:83:31:99:0c:6b:6f:60:1a:a4:00:
         fa:e4:aa:f5:2f:37:89:a8:41:54:84:25:5d:0b:59:db:fe:f1:
         15:2a:c6:b8:be:b8:26:5a:a6:f8:ba:9a:ea:ce:69:39:e3:47:
         ea:2d:9c:b3:b4:7c:bf:cb:80:59:81:00:1f:39:9d:66:7e:bb:
         9d:24:0f:8a:e4:e3:25:2b:fd:6c:2e:29:b1:39:37:36:bc:dd:
         a4:b4:9a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8a:27:93:f7:53:8e:01:34:58:db:a9:3d:d0:8b:61:22:1b:4b:15
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ShadowRoot
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:87:39:cb:43:d9:24:e9:2c:54:cd:18:ea:
                    b8:87:ec:2f:d3:57:e3:9c:23:be:94:3c:26:41:db:
                    61:40:b8:ad:07:53:f1:69:c5:b4:2c:6a:ad:de:e5:
                    4a:bd:e3:0f:77:c4:59:fa:ee:d5:3a:1a:93:ca:cd:
                    b1:22:2a:24:42:5a:01:42:e8:57:74:f9:89:56:f8:
                    c1:13:f6:c9:42:9b:45:7b:ff:b7:aa:c1:1f:1b:e8:
                    02:24:12:97:0d:84:b9:62:70:83:93:72:cd:9b:1a:
                    26:27:92:34:46:51:c5:b7:c7:4a:b4:7a:8a:84:98:
                    e2:f7:90:4d:cc:cf:3d:ee:85:91:8d:75:60:38:0c:
                    e5:0b:00:e6:fe:e9:c3:19:64:3f:2d:c8:14:f1:d9:
                    a9:76:05:54:a8:5a:9e:64:56:ed:60:43:c5:98:db:
                    7a:ae:da:2c:56:cb:87:00:6f:3d:83:3b:a3:5c:f5:
                    55:0d:6c:ab:ed:68:c1:b8:1d:a5:d0:77:1d:b7:e6:
                    52:ef:2c:75:3a:98:ec:51:6f:15:5f:64:82:f6:d1:
                    90:bd:ee:01:28:e5:89:0e:01:ee:54:07:1d:0e:7a:
                    f0:82:9c:cc:c1:c5:4a:f6:a9:58:33:c5:cc:a3:86:
                    17:72:19:92:2c:ae:6a:46:a8:a8:25:2a:cf:ba:70:
                    c1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                91:D7:20:C6:1D:00:21:35:53:7D:FE:50:11:02:DD:E3:40:2B:9A:A8
            X509v3 Authority Key Identifier: 
                keyid:85:C5:B6:72:29:30:56:96:1B:80:37:79:29:18:A2:BD:48:F9:9E:4A

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/ShadowRoot.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/ShadowRoot.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         1d:17:f8:d1:b0:00:d8:ef:47:e9:fa:46:9b:ca:95:9e:41:06:
         c2:4c:91:1d:75:a3:58:c1:c0:ca:f7:63:5d:75:9f:be:65:80:
         c7:59:16:f0:70:37:dd:e3:ac:6b:03:95:28:94:a9:84:54:1c:
         a9:53:bc:d7:81:fc:bc:b3:cd:52:b1:78:77:ee:db:af:7e:0b:
         2a:da:c3:28:8d:c0:a1:3b:b8:96:b7:64:37:92:80:3b:d8:75:
         d3:10:fd:03:10:1e:fe:d0:2e:5b:e7:b7:6f:1b:47:b6:4c:1d:
         fe:e7:f6:50:91:0c:24:df:53:e8:f5:cc:92:a7:c5:69:d1:bc:
         ab:2a:0c:86:9c:d8:6e:4c:9b:0b:13:12:f6:0a:40:de:79:62:
         8b:04:c2:10:06:d0:90:2b:1c:0c:3c:e8:ef:72:16:09:3d:1f:
         98:66:d6:8c:ae:8f:d2:67:56:0c:8e:a3:b2:3f:35:c1:82:01:
         3d:4f:c2:0c:5a:b0:15:28:f4:b4:b1:73:67:7b:0a:34:e2:a7:
         aa:25:27:59:88:61:87:86:b4:e5:ef:c7:44:e2:86:3a:50:da:
         93:de:49:ec:b9:61:3b:34:9f:2a:94:e5:3f:44:44:f8:e4:58:
         43:eb:2e:74:6b:77:ff:ee:71:ad:98:41:66:bb:aa:04:7e:7c:
         f1:bd:06:50
-----BEGIN CERTIFICATE-----
MIIDijCCAnKgAwIBAgIUHoonk/dTjgE0WNupPdCLYSIbSxUwDQYJKoZIhvcNAQEL
BQAwFTETMBEGA1UEAwwKU2hhZG93Um9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEw
MDUxMjAwMDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7+oc5y0PZJOksVM0Y6riH7C/TV+OcI76UPCZB22FAuK0HU/Fp
xbQsaq3e5Uq94w93xFn67tU6GpPKzbEiKiRCWgFC6Fd0+YlW+MET9slCm0V7/7eq
wR8b6AIkEpcNhLlicIOTcs2bGiYnkjRGUcW3x0q0eoqEmOL3kE3Mzz3uhZGNdWA4
DOULAOb+6cMZZD8tyBTx2al2BVSoWp5kVu1gQ8WY23qu2ixWy4cAbz2DO6Nc9VUN
bKvtaMG4HaXQdx235lLvLHU6mOxRbxVfZIL20ZC97gEo5YkOAe5UBx0OevCCnMzB
xUr2qVgzxcyjhhdyGZIsrmpGqKglKs+6cMGJAgMBAAGjgdcwgdQwHQYDVR0OBBYE
FJHXIMYdACE1U33+UBEC3eNAK5qoMB8GA1UdIwQYMBaAFIXFtnIpMFaWG4A3eSkY
or1I+Z5KMD0GCCsGAQUFBwEBBDEwLzAtBggrBgEFBQcwAoYhaHR0cDovL3VybC1m
b3ItYWlhL1NoYWRvd1Jvb3QuY2VyMDIGA1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly91
cmwtZm9yLWNybC9TaGFkb3dSb290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0T
AQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAHRf40bAA2O9H6fpGm8qVnkEG
wkyRHXWjWMHAyvdjXXWfvmWAx1kW8HA33eOsawOVKJSphFQcqVO814H8vLPNUrF4
d+7br34LKtrDKI3AoTu4lrdkN5KAO9h10xD9AxAe/tAuW+e3bxtHtkwd/uf2UJEM
JN9T6PXMkqfFadG8qyoMhpzYbkybCxMS9gpA3nliiwTCEAbQkCscDDzo73IWCT0f
mGbWjK6P0mdWDI6jsj81wYIBPU/CDFqwFSj0tLFzZ3sKNOKnqiUnWYhhh4a05e/H
ROKGOlDak95J7LlhOzSfKpTlP0RE+ORYQ+sudGt3/+5xrZhBZruqBH588b0GUA==
-----END CERTIFICATE-----