| [Created by: generate-chains.py] |
| |
| Certificate chain where the intermediate has a smaller validity range |
| than the other certificates, making it easy to violate just its validity. |
| |
| Root: 2015/01/01 -> 2016/01/01 |
| Intermediate: 2015/03/01 -> 2015/09/01 |
| Target: 2015/01/01 -> 2016/01/01 |
| |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 73:60:af:38:91:cf:45:20:b2:11:f8:2c:36:b2:3d:e8:ed:26:6b:7c |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Intermediate |
| Validity |
| Not Before: Jan 1 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2016 GMT |
| Subject: CN=Target |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| RSA Public-Key: (2048 bit) |
| Modulus: |
| 00:e5:5d:52:78:e5:9d:90:f8:e6:89:33:f2:76:2f: |
| 04:9f:a8:f1:db:92:f1:b3:43:19:a3:7c:1f:a1:46: |
| 2f:aa:b4:48:fe:f2:35:cd:2d:61:76:e7:5c:52:c9: |
| 7b:d6:90:3a:91:11:44:a8:bd:39:d4:5d:10:e0:17: |
| 71:03:b9:e2:a5:fb:08:15:d2:50:dd:4d:67:ed:9c: |
| a9:9b:3e:bd:3a:91:57:49:53:73:8b:2b:3e:c0:e4: |
| aa:c9:c2:68:31:82:b4:0e:40:a9:e7:d1:c4:f6:5b: |
| 48:3d:88:74:1f:43:2e:f8:b3:66:d8:41:b4:0b:6a: |
| 21:38:05:65:05:99:8f:84:75:07:57:3a:1b:7b:2d: |
| 21:0a:fc:7a:22:d9:d3:89:43:0c:1a:18:f9:92:d9: |
| 42:0f:86:d8:28:d2:b4:ca:28:9a:85:29:1b:0a:d7: |
| 01:3b:bd:cb:83:36:a0:d3:d3:4c:5a:54:06:a0:a0: |
| c6:51:12:33:00:5f:85:2e:0a:b5:63:2e:e0:f3:95: |
| 03:f9:d8:17:24:19:85:a1:23:cc:45:ea:2f:2e:89: |
| 3c:05:52:f0:69:95:0e:fc:71:1a:8f:2c:90:54:6f: |
| 14:46:33:99:bd:8b:a7:5e:0b:ad:ad:00:4f:78:8b: |
| 69:36:a5:38:43:63:f4:6f:f1:a8:f6:21:22:38:56: |
| 9f:7b |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 6E:07:CA:2E:D6:33:0C:B0:73:89:52:A6:81:9F:EA:5A:7D:58:36:E5 |
| X509v3 Authority Key Identifier: |
| keyid:72:43:36:2F:89:32:3C:1F:45:05:00:D1:48:B6:8F:03:7A:01:52:38 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Intermediate.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Intermediate.crl |
| |
| X509v3 Key Usage: critical |
| Digital Signature, Key Encipherment |
| X509v3 Extended Key Usage: |
| TLS Web Server Authentication, TLS Web Client Authentication |
| Signature Algorithm: sha256WithRSAEncryption |
| 14:34:ce:62:08:64:36:8e:3c:83:a8:5a:e9:42:34:8a:bf:29: |
| c6:98:10:f5:11:cb:e6:dd:09:a9:61:77:ef:62:d3:35:ba:3d: |
| 7b:f1:77:1a:c0:c2:05:b8:05:6a:f0:2d:82:a4:a5:58:ae:e4: |
| bc:86:d4:19:68:9b:61:1a:2b:3b:d8:f1:c4:fa:ce:75:ea:0e: |
| f8:79:00:0d:1c:42:28:de:2b:fb:d6:2c:55:25:d1:f9:91:ce: |
| fd:3b:8e:20:03:c1:46:a8:3f:06:c2:f6:31:70:f4:0e:ac:e5: |
| d3:7e:35:2a:33:b7:85:49:b5:90:34:86:fb:91:f8:a2:f9:96: |
| cb:6e:0b:22:7f:0e:10:d1:6b:ef:f8:50:51:6e:1b:4a:cd:ea: |
| a2:13:6c:f6:31:3e:fb:53:7a:33:b4:1b:22:83:c7:0a:b1:e4: |
| ab:7e:46:38:31:4e:59:c7:63:6a:61:a4:b1:b6:9d:76:10:b6: |
| 70:fa:4b:1c:a8:41:9e:7f:1b:c0:1c:c5:c3:77:94:3d:36:b8: |
| 2e:38:7a:cb:ac:10:91:ac:13:33:93:77:ca:ec:96:e1:45:ee: |
| 40:45:0a:11:af:b7:59:be:86:ba:1a:fd:03:ec:4b:5e:7f:0f: |
| 24:9f:8e:5a:a4:6e:11:da:68:56:b5:af:51:87:99:52:e7:09: |
| 48:6e:ee:61 |
| -----BEGIN CERTIFICATE----- |
| MIIDoDCCAoigAwIBAgIUc2CvOJHPRSCyEfgsNrI96O0ma3wwDQYJKoZIhvcNAQEL |
| BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTE1MDEwMTEyMDAwMFoXDTE2 |
| MDEwMTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF |
| AAOCAQ8AMIIBCgKCAQEA5V1SeOWdkPjmiTPydi8En6jx25Lxs0MZo3wfoUYvqrRI |
| /vI1zS1hdudcUsl71pA6kRFEqL051F0Q4BdxA7nipfsIFdJQ3U1n7Zypmz69OpFX |
| SVNziys+wOSqycJoMYK0DkCp59HE9ltIPYh0H0Mu+LNm2EG0C2ohOAVlBZmPhHUH |
| Vzobey0hCvx6ItnTiUMMGhj5ktlCD4bYKNK0yiiahSkbCtcBO73Lgzag09NMWlQG |
| oKDGURIzAF+FLgq1Yy7g85UD+dgXJBmFoSPMReovLok8BVLwaZUO/HEajyyQVG8U |
| RjOZvYunXgutrQBPeItpNqU4Q2P0b/Go9iEiOFafewIDAQABo4HpMIHmMB0GA1Ud |
| DgQWBBRuB8ou1jMMsHOJUqaBn+pafVg25TAfBgNVHSMEGDAWgBRyQzYviTI8H0UF |
| ANFIto8DegFSODA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91 |
| cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0 |
| dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIF |
| oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD |
| ggEBABQ0zmIIZDaOPIOoWulCNIq/KcaYEPURy+bdCalhd+9i0zW6PXvxdxrAwgW4 |
| BWrwLYKkpViu5LyG1Blom2EaKzvY8cT6znXqDvh5AA0cQijeK/vWLFUl0fmRzv07 |
| jiADwUaoPwbC9jFw9A6s5dN+NSozt4VJtZA0hvuR+KL5lstuCyJ/DhDRa+/4UFFu |
| G0rN6qITbPYxPvtTejO0GyKDxwqx5Kt+RjgxTlnHY2phpLG2nXYQtnD6SxyoQZ5/ |
| G8AcxcN3lD02uC44esusEJGsEzOTd8rsluFF7kBFChGvt1m+hroa/QPsS15/DySf |
| jlqkbhHaaFa1r1GHmVLnCUhu7mE= |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 38:57:36:7e:2c:71:3a:58:d9:58:83:7f:8c:1f:66:21:38:9d:41:83 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Mar 1 12:00:00 2015 GMT |
| Not After : Sep 1 12:00:00 2015 GMT |
| Subject: CN=Intermediate |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| RSA Public-Key: (2048 bit) |
| Modulus: |
| 00:c2:f3:7c:09:dc:05:78:96:43:d9:a5:90:a3:1d: |
| a4:d8:2e:f6:2d:c4:4e:8d:ee:37:1d:30:28:44:f6: |
| 50:f9:99:12:c4:b6:be:44:0f:07:48:22:67:d1:60: |
| 42:60:2a:27:62:15:d2:d1:2e:9a:16:02:4e:fb:44: |
| 37:8c:ba:7a:7d:72:af:55:cf:d6:f5:7c:1f:b3:dd: |
| fa:b8:57:e4:78:72:72:90:f5:85:cb:c3:7e:8d:1f: |
| 89:1f:50:43:ff:53:e4:a7:ff:65:b7:af:da:bd:b1: |
| 80:77:0d:d5:a2:e3:59:35:97:d0:fc:39:26:b5:9a: |
| af:3c:7c:ac:5a:05:af:ca:98:40:3f:20:1c:ae:3c: |
| b2:35:e7:52:ff:01:aa:83:1a:67:aa:77:83:67:2e: |
| 95:6e:79:49:e8:28:dd:74:82:b2:c0:17:81:9e:f7: |
| 2a:1d:c2:14:7c:2a:10:b4:16:19:e1:59:10:48:36: |
| 35:c8:f9:bc:35:36:91:2d:c9:81:a4:18:b4:2f:ff: |
| 79:6d:32:ca:23:52:c0:d3:39:2c:7e:c2:a1:99:53: |
| 9d:ee:1e:50:4b:5d:af:f3:ca:df:39:6b:dc:54:24: |
| 0c:14:7b:3e:f7:f8:5e:b8:af:ea:67:68:4b:08:1f: |
| 25:5b:14:ff:31:e7:7d:50:c7:15:b2:53:2a:a3:5a: |
| a5:c3 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 72:43:36:2F:89:32:3C:1F:45:05:00:D1:48:B6:8F:03:7A:01:52:38 |
| X509v3 Authority Key Identifier: |
| keyid:5A:2B:EB:7C:7B:14:AB:7F:3B:58:EC:EC:21:5E:A5:EB:E1:F4:4F:5F |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| b0:33:01:a0:4a:ee:23:13:a3:e6:93:bc:54:f6:18:0d:e9:1f: |
| 71:f9:0d:3a:c0:8a:63:9b:66:d0:35:34:97:38:a9:32:fa:ef: |
| b0:c5:6b:b5:ea:6c:2e:db:bb:2d:2d:d1:5b:74:71:e3:17:a5: |
| ef:a3:4d:64:8f:98:b4:f4:e0:9e:3e:ad:f2:ac:a7:5d:1a:b4: |
| 09:68:54:4b:ef:c7:a1:3a:8f:3e:5f:13:21:04:f9:ed:8d:31: |
| 43:f2:1f:f2:87:d4:22:c9:70:9d:f4:a6:0c:ad:f5:27:49:59: |
| e9:95:41:d9:58:38:4c:c4:f9:6a:77:e0:15:a6:4c:6b:17:1e: |
| 25:b3:10:c3:0b:cd:47:d0:db:86:62:7b:50:e4:d5:54:e7:d3: |
| 89:82:8e:f2:c7:a5:57:00:7d:b3:1d:b4:ed:c7:4c:50:dd:a3: |
| 56:74:cc:15:30:fc:a9:c9:39:18:39:75:3a:ec:1f:28:1e:e3: |
| ba:01:de:98:e8:e9:fe:8b:16:99:c7:67:93:c9:c2:40:48:0f: |
| c6:e2:ba:51:0b:03:18:21:41:56:cc:ea:40:0e:b5:9d:8e:d6: |
| f8:01:df:0d:97:f2:8b:cc:54:e5:eb:46:59:19:4d:a3:f3:3a: |
| ce:3e:c7:f5:46:77:d7:41:c7:1b:4d:fd:58:27:4d:c7:32:ed: |
| 33:88:44:b3 |
| -----BEGIN CERTIFICATE----- |
| MIIDgDCCAmigAwIBAgIUOFc2fixxOljZWIN/jB9mITidQYMwDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xNTAzMDExMjAwMDBaFw0xNTA5MDExMjAw |
| MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD |
| ggEPADCCAQoCggEBAMLzfAncBXiWQ9mlkKMdpNgu9i3ETo3uNx0wKET2UPmZEsS2 |
| vkQPB0giZ9FgQmAqJ2IV0tEumhYCTvtEN4y6en1yr1XP1vV8H7Pd+rhX5HhycpD1 |
| hcvDfo0fiR9QQ/9T5Kf/Zbev2r2xgHcN1aLjWTWX0Pw5JrWarzx8rFoFr8qYQD8g |
| HK48sjXnUv8BqoMaZ6p3g2culW55Sego3XSCssAXgZ73Kh3CFHwqELQWGeFZEEg2 |
| Ncj5vDU2kS3JgaQYtC//eW0yyiNSwNM5LH7CoZlTne4eUEtdr/PK3zlr3FQkDBR7 |
| Pvf4Xriv6mdoSwgfJVsU/zHnfVDHFbJTKqNapcMCAwEAAaOByzCByDAdBgNVHQ4E |
| FgQUckM2L4kyPB9FBQDRSLaPA3oBUjgwHwYDVR0jBBgwFoAUWivrfHsUq387WOzs |
| IV6l6+H0T18wNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs |
| LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m |
| b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/ |
| MA0GCSqGSIb3DQEBCwUAA4IBAQCwMwGgSu4jE6Pmk7xU9hgN6R9x+Q06wIpjm2bQ |
| NTSXOKky+u+wxWu16mwu27stLdFbdHHjF6Xvo01kj5i09OCePq3yrKddGrQJaFRL |
| 78ehOo8+XxMhBPntjTFD8h/yh9QiyXCd9KYMrfUnSVnplUHZWDhMxPlqd+AVpkxr |
| Fx4lsxDDC81H0NuGYntQ5NVU59OJgo7yx6VXAH2zHbTtx0xQ3aNWdMwVMPypyTkY |
| OXU67B8oHuO6Ad6Y6On+ixaZx2eTycJASA/G4rpRCwMYIUFWzOpADrWdjtb4Ad8N |
| l/KLzFTl60ZZGU2j8zrOPsf1RnfXQccbTf1YJ03HMu0ziESz |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 38:57:36:7e:2c:71:3a:58:d9:58:83:7f:8c:1f:66:21:38:9d:41:82 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Jan 1 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2016 GMT |
| Subject: CN=Root |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| RSA Public-Key: (2048 bit) |
| Modulus: |
| 00:c5:99:c3:5a:ac:ee:dd:88:55:9e:e4:3b:02:e9: |
| 99:bf:7e:7c:20:2e:ad:35:96:06:74:f8:06:62:6c: |
| 30:55:b5:16:f9:e2:db:99:65:f8:b7:58:00:01:70: |
| 3f:7c:23:ff:a7:39:4b:3a:d8:f7:72:65:3e:fd:66: |
| c0:69:43:cc:85:22:3b:d7:22:5d:1f:aa:d4:39:83: |
| 58:08:cd:e3:c1:8b:f1:77:4a:92:6a:5c:83:df:1b: |
| 59:dd:b5:92:fd:b0:6a:b0:29:a6:13:7e:2b:0e:cb: |
| a7:0e:30:c4:b6:2f:f7:1b:e3:ce:3c:38:2c:18:bd: |
| 0c:21:dd:e1:dd:2a:18:77:94:31:12:89:0a:ee:80: |
| 30:98:2f:3a:fc:72:75:9c:f1:fb:39:31:c7:ac:63: |
| 24:d4:11:40:86:49:e4:72:ce:b9:df:f3:51:bd:d7: |
| f2:7b:49:cd:97:65:4a:8f:65:c0:87:61:99:9c:86: |
| c9:96:95:fc:bc:d2:c4:c2:cc:82:c4:1b:3d:18:ba: |
| dd:13:1c:80:cf:9a:34:e7:44:90:29:c5:e5:f9:53: |
| 2f:20:e2:1c:95:ff:01:bb:ea:89:d1:47:59:fd:5a: |
| 44:75:58:df:42:29:bc:50:89:bc:1d:6c:e3:35:f8: |
| 85:ce:57:c4:c5:47:58:37:5d:1f:1b:03:66:61:0d: |
| 2f:79 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 5A:2B:EB:7C:7B:14:AB:7F:3B:58:EC:EC:21:5E:A5:EB:E1:F4:4F:5F |
| X509v3 Authority Key Identifier: |
| keyid:5A:2B:EB:7C:7B:14:AB:7F:3B:58:EC:EC:21:5E:A5:EB:E1:F4:4F:5F |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 26:d5:ba:c9:fb:e4:0d:75:44:79:16:26:33:6c:08:5d:67:60: |
| 19:ef:e0:6d:49:72:30:4a:f1:88:b9:51:bc:c5:e4:e6:10:6c: |
| ce:0c:6b:37:b7:a7:d3:d9:03:41:7f:4e:e7:a0:4a:ec:52:af: |
| 35:10:03:90:a2:84:4f:9a:b7:c3:d3:f4:f0:14:f8:23:f5:b2: |
| 1c:55:b8:8f:6a:fd:9b:05:60:b8:48:95:e3:9b:15:99:f8:98: |
| 2f:1d:cd:89:ae:91:b5:3b:4b:22:29:44:d2:76:0d:1c:0a:e5: |
| 9d:98:8f:6e:c1:d4:8b:fb:b3:aa:9d:7f:56:cb:a4:9a:27:9a: |
| e3:52:50:82:01:fe:8f:ba:dc:fb:f5:7e:d0:ce:07:4b:5e:91: |
| fa:41:21:9f:a6:15:e0:01:0d:7b:c5:53:07:f5:3d:63:89:87: |
| b4:a9:a2:9a:49:f7:26:64:6e:1b:9a:ce:95:e9:51:98:31:25: |
| ea:cb:c8:dd:6a:3f:af:32:78:22:27:32:b7:61:64:c5:6c:b7: |
| 96:77:1c:ec:14:93:2d:14:e5:53:9d:d9:db:09:61:bf:7f:bf: |
| cd:d4:d3:09:03:8a:20:0a:b6:19:40:a2:58:8d:e9:65:54:56: |
| ca:6a:13:f3:e1:cf:da:e3:f9:eb:49:52:cf:89:2e:52:1d:ee: |
| 64:1e:40:91 |
| -----BEGIN CERTIFICATE----- |
| MIIDeDCCAmCgAwIBAgIUOFc2fixxOljZWIN/jB9mITidQYIwDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xNTAxMDExMjAwMDBaFw0xNjAxMDExMjAw |
| MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK |
| AoIBAQDFmcNarO7diFWe5DsC6Zm/fnwgLq01lgZ0+AZibDBVtRb54tuZZfi3WAAB |
| cD98I/+nOUs62PdyZT79ZsBpQ8yFIjvXIl0fqtQ5g1gIzePBi/F3SpJqXIPfG1nd |
| tZL9sGqwKaYTfisOy6cOMMS2L/cb4848OCwYvQwh3eHdKhh3lDESiQrugDCYLzr8 |
| cnWc8fs5McesYyTUEUCGSeRyzrnf81G91/J7Sc2XZUqPZcCHYZmchsmWlfy80sTC |
| zILEGz0Yut0THIDPmjTnRJApxeX5Uy8g4hyV/wG76onRR1n9WkR1WN9CKbxQibwd |
| bOM1+IXOV8TFR1g3XR8bA2ZhDS95AgMBAAGjgcswgcgwHQYDVR0OBBYEFFor63x7 |
| FKt/O1js7CFepevh9E9fMB8GA1UdIwQYMBaAFFor63x7FKt/O1js7CFepevh9E9f |
| MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh |
| L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S |
| b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG |
| 9w0BAQsFAAOCAQEAJtW6yfvkDXVEeRYmM2wIXWdgGe/gbUlyMErxiLlRvMXk5hBs |
| zgxrN7en09kDQX9O56BK7FKvNRADkKKET5q3w9P08BT4I/WyHFW4j2r9mwVguEiV |
| 45sVmfiYLx3Nia6RtTtLIilE0nYNHArlnZiPbsHUi/uzqp1/Vsukmiea41JQggH+ |
| j7rc+/V+0M4HS16R+kEhn6YV4AENe8VTB/U9Y4mHtKmimkn3JmRuG5rOlelRmDEl |
| 6svI3Wo/rzJ4Iicyt2FkxWy3lncc7BSTLRTlU53Z2wlhv3+/zdTTCQOKIAq2GUCi |
| WI3pZVRWymoT8+HP2uP560lSz4kuUh3uZB5AkQ== |
| -----END CERTIFICATE----- |
