[Created by: generate-chains.py]

Generates certificate chains where the intermediate contains netscape server
gated crypto rather than serverAuth.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b5:13:fb:79:d7:bf:0c:f5:4b:2a:50:4c:9a:68:d0:89:a0:f2:9d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2e:8b:18:8d:f7:76:2c:94:0c:3f:a0:b6:ea:
                    70:1f:5e:c8:48:c5:aa:ad:55:6b:bd:55:68:0d:8e:
                    ce:e5:99:27:c5:2c:b2:9a:29:a9:8f:8e:c3:c6:97:
                    89:6d:31:d7:a4:8f:d8:36:37:4f:33:c7:d6:42:03:
                    11:08:c4:7f:35:8c:ee:0f:1b:7a:31:74:04:aa:01:
                    d3:1e:8b:5b:01:9d:60:4b:9c:d1:8f:1e:ab:e5:dc:
                    8f:17:77:49:e3:f6:d5:82:a5:2f:0a:e8:dc:9f:96:
                    1e:2a:a1:41:d1:67:2c:9e:f3:7f:94:0c:6e:cf:5f:
                    55:52:37:05:d0:39:37:1a:6e:11:ed:db:fa:aa:92:
                    a7:4f:50:29:07:69:af:1d:a7:99:fa:e1:56:f0:03:
                    38:b0:ae:6b:e7:19:0b:dd:c3:07:31:8e:84:04:a5:
                    b4:eb:b8:bc:23:f3:40:b0:17:b4:ab:9e:3f:05:96:
                    89:fc:84:23:cc:d1:06:c2:e4:8b:c6:65:f5:24:eb:
                    72:31:bc:41:7d:3a:c9:55:08:0c:ee:a6:ae:1f:78:
                    17:f8:a7:9d:7b:b1:82:f5:ce:82:6b:a8:b2:c6:8a:
                    b9:be:a5:d8:39:f4:49:e2:4c:53:32:85:26:53:4d:
                    44:ce:d5:3b:a0:6b:e7:d9:02:a1:5a:ef:e1:a5:81:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EB:B0:1C:BD:B7:68:B8:D1:B9:8A:C2:9F:5D:CF:DD:AF:F2:62:70:8A
            X509v3 Authority Key Identifier: 
                keyid:EE:C6:9A:65:CC:FB:CE:A0:3E:17:02:F9:68:12:86:B6:22:09:60:B4

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Alternative Name: 
                DNS:test.example
    Signature Algorithm: sha256WithRSAEncryption
         ae:3a:23:25:7f:40:ed:93:24:d6:8d:66:f1:b5:aa:56:37:c1:
         28:89:e5:84:0b:42:14:28:29:45:93:24:6f:80:71:2f:d9:0e:
         ab:c9:70:29:60:83:0a:87:3a:f1:9f:5e:35:dc:36:e9:83:b4:
         ab:41:2d:7f:00:df:a6:ff:21:b0:89:cb:b1:7f:bf:7b:18:f6:
         62:51:0b:97:c7:5b:af:3f:a1:e7:a1:07:3c:d3:57:54:c3:33:
         58:78:8e:2b:40:6a:7b:c5:5a:f8:ee:12:2b:8e:12:da:65:b3:
         05:ea:49:e4:38:11:a5:73:f1:11:3e:41:77:d5:3b:af:a3:88:
         c4:54:21:bc:3c:52:e9:2e:04:cb:9a:39:08:6b:c9:d5:4f:7b:
         39:3f:54:82:d0:93:53:72:51:bb:2e:39:75:7f:c9:df:78:f6:
         bd:f4:39:e5:bd:49:89:6b:4d:9a:ca:af:94:2e:d7:a1:aa:a5:
         9e:6c:c3:af:cc:00:4b:1a:86:86:a6:80:b2:fe:cc:d2:1d:09:
         c7:a3:3a:bc:aa:c0:d6:1a:ca:47:9a:96:9f:44:d1:90:7e:53:
         70:87:e7:20:c7:33:f6:f7:3b:76:32:68:29:62:48:24:65:d6:
         bf:5d:ec:33:b1:13:9b:24:a6:e6:d1:22:b4:04:2c:9e:0d:63:
         65:7b:a5:69
-----BEGIN CERTIFICATE-----
MIIDujCCAqKgAwIBAgIUFrUT+3nXvwz1SypQTJpo0Img8p0wDQYJKoZIhvcNAQEL
BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTIxMTAwNTEyMDAwMFoXDTIy
MTAwNTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAri6LGI33diyUDD+gtupwH17ISMWqrVVrvVVoDY7O5Zkn
xSyymimpj47DxpeJbTHXpI/YNjdPM8fWQgMRCMR/NYzuDxt6MXQEqgHTHotbAZ1g
S5zRjx6r5dyPF3dJ4/bVgqUvCujcn5YeKqFB0WcsnvN/lAxuz19VUjcF0Dk3Gm4R
7dv6qpKnT1ApB2mvHaeZ+uFW8AM4sK5r5xkL3cMHMY6EBKW067i8I/NAsBe0q54/
BZaJ/IQjzNEGwuSLxmX1JOtyMbxBfTrJVQgM7qauH3gX+Kede7GC9c6Ca6iyxoq5
vqXYOfRJ4kxTMoUmU01EztU7oGvn2QKhWu/hpYGn+wIDAQABo4IBAjCB/zAdBgNV
HQ4EFgQU67AcvbdouNG5isKfXc/dr/JicIowHwYDVR0jBBgwFoAU7saaZcz7zqA+
FwL5aBKGtiIJYLQwPwYIKwYBBQUHAQEEMzAxMC8GCCsGAQUFBzAChiNodHRwOi8v
dXJsLWZvci1haWEvSW50ZXJtZWRpYXRlLmNlcjA0BgNVHR8ELTArMCmgJ6AlhiNo
dHRwOi8vdXJsLWZvci1jcmwvSW50ZXJtZWRpYXRlLmNybDAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBcGA1UdEQQQMA6CDHRl
c3QuZXhhbXBsZTANBgkqhkiG9w0BAQsFAAOCAQEArjojJX9A7ZMk1o1m8bWqVjfB
KInlhAtCFCgpRZMkb4BxL9kOq8lwKWCDCoc68Z9eNdw26YO0q0EtfwDfpv8hsInL
sX+/exj2YlELl8dbrz+h56EHPNNXVMMzWHiOK0Bqe8Va+O4SK44S2mWzBepJ5DgR
pXPxET5Bd9U7r6OIxFQhvDxS6S4Ey5o5CGvJ1U97OT9UgtCTU3JRuy45dX/J33j2
vfQ55b1JiWtNmsqvlC7XoaqlnmzDr8wASxqGhqaAsv7M0h0Jx6M6vKrA1hrKR5qW
n0TRkH5TcIfnIMcz9vc7djJoKWJIJGXWv13sM7ETmySm5tEitAQsng1jZXulaQ==
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e0:1e:36:75:40:12:16:19:8d:07:a8:3f:9b:ff:e1:59:bc:6a:9e
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:41:40:6f:cb:25:05:d9:29:d0:a3:c7:fe:2f:
                    f0:53:ad:46:36:19:aa:b1:1f:3f:7a:a2:e0:fb:03:
                    2b:77:65:6a:79:eb:f3:a3:16:13:34:83:3b:42:de:
                    a2:bb:e2:bf:d8:d2:75:3d:48:38:86:bb:2a:7d:14:
                    a3:88:f7:7c:00:f4:0a:6b:6b:aa:9b:44:24:62:fe:
                    db:a3:42:55:15:67:2a:32:ff:b2:4d:80:93:d0:84:
                    ef:1b:dc:7c:ac:56:2d:54:08:02:f6:18:6e:b5:80:
                    a8:77:52:1f:b8:2c:09:6d:cc:f8:1c:04:91:62:6e:
                    1e:dd:1d:89:b2:f1:23:0b:4d:4c:6c:da:49:3d:61:
                    83:72:0f:66:36:12:3f:f3:ff:53:52:73:53:a1:ca:
                    38:bd:c3:48:bf:7a:2f:13:19:d7:c2:28:e1:6f:32:
                    00:5e:64:ac:4b:05:7a:77:62:57:55:a9:59:83:d5:
                    ed:a3:2e:28:34:71:79:2f:b9:c3:9e:df:b3:2a:b1:
                    59:cd:04:00:1d:8b:11:56:ae:c6:67:f6:4f:1d:58:
                    07:65:e0:b0:2f:ef:57:6d:de:c1:a0:7c:6e:38:a8:
                    45:26:21:96:e0:f6:ef:0e:28:cf:01:70:57:dc:20:
                    15:08:ad:e8:e3:98:74:8c:54:32:c1:28:17:e0:de:
                    a1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                EE:C6:9A:65:CC:FB:CE:A0:3E:17:02:F9:68:12:86:B6:22:09:60:B4
            X509v3 Authority Key Identifier: 
                keyid:42:75:41:34:C5:59:9F:99:A3:9B:1C:0C:57:DB:5C:C7:C1:48:B7:91

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Extended Key Usage: 
                Netscape Server Gated Crypto
    Signature Algorithm: sha1WithRSAEncryption
         7a:c0:60:a1:ed:92:ff:ee:fa:8d:8e:c6:9a:04:d1:e9:b2:6a:
         64:f0:ad:c0:9a:20:40:22:db:1f:b9:d7:34:c5:cb:df:fa:cf:
         52:37:4e:57:84:8f:e3:ba:fc:ad:b3:50:76:d5:58:9a:8a:49:
         c9:6c:71:93:a9:f1:bf:6e:db:01:59:42:2f:97:69:01:8c:3a:
         15:41:41:39:78:6f:ad:f9:61:50:38:54:b0:18:9c:8c:10:c9:
         ee:ef:f2:74:62:e3:bf:3a:db:69:27:bd:d2:db:70:da:73:2f:
         03:2d:74:06:a5:1f:47:45:78:ad:33:49:5e:e0:e9:b3:cf:e6:
         31:41:ff:9f:26:8f:28:22:bb:07:5e:b4:2a:ff:20:b0:e1:5e:
         43:79:44:e9:85:4b:17:44:6a:98:3f:76:b5:2f:af:2f:bb:08:
         cb:58:7b:61:de:f6:29:87:97:57:dd:a2:09:62:b9:21:4c:69:
         dc:c4:52:94:4b:9a:29:d2:19:15:c5:01:9a:d0:bd:c5:fe:03:
         5a:55:0d:01:3e:58:b0:06:49:92:ae:4c:11:19:4f:c0:04:50:
         81:9d:18:88:ea:f9:eb:23:a4:d3:bb:e5:c0:a1:75:db:f5:20:
         e4:0d:34:16:39:2e:70:3a:60:26:fb:d5:ad:5a:4d:be:11:08:
         6f:69:c9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e0:1e:36:75:40:12:16:19:8d:07:a8:3f:9b:ff:e1:59:bc:6a:9d
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:66:c7:e7:fd:21:14:ec:df:4a:05:1a:8c:
                    22:da:8f:3e:b7:8e:ca:a2:de:d7:e3:08:05:cd:28:
                    1c:da:d4:99:ba:ad:de:92:07:44:18:55:e7:b5:41:
                    6b:38:64:18:06:ab:6c:b8:ad:3d:b8:4e:c8:fa:8c:
                    fc:58:2c:2c:a8:42:08:28:b4:85:2a:aa:57:e2:a8:
                    76:4a:6e:fe:38:2f:d1:14:c6:52:6f:05:a4:89:54:
                    c2:0f:f0:93:83:09:b7:55:56:94:7b:57:65:87:09:
                    dd:61:ea:1a:02:3c:24:a5:cc:2d:d3:7c:0a:dc:2e:
                    67:a2:7f:91:ad:b4:76:76:02:ac:7f:85:5f:61:86:
                    0c:60:15:a0:82:7f:85:16:f4:10:8d:49:27:e4:33:
                    58:75:55:6b:5a:ab:c7:d1:bd:3d:a8:3b:68:1b:b4:
                    de:68:89:c4:87:fe:87:04:d4:52:f3:8f:fa:2e:44:
                    79:c1:62:46:b7:88:4c:bb:75:61:fd:e6:c5:6a:fb:
                    a8:3b:ef:a7:e6:1a:1e:44:2d:61:a7:4e:63:5e:66:
                    b8:f7:85:60:74:8b:ea:20:82:84:84:71:f5:1d:c6:
                    0c:c2:ee:11:78:01:ae:44:5a:e3:7b:97:2e:01:d0:
                    18:91:77:01:23:7f:d2:21:73:f4:f3:9a:94:ad:93:
                    2e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                42:75:41:34:C5:59:9F:99:A3:9B:1C:0C:57:DB:5C:C7:C1:48:B7:91
            X509v3 Authority Key Identifier: 
                keyid:42:75:41:34:C5:59:9F:99:A3:9B:1C:0C:57:DB:5C:C7:C1:48:B7:91

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         33:ba:bf:f6:77:75:ff:00:54:82:6a:d9:2b:33:43:5c:ce:d1:
         5f:4b:2a:fe:00:65:0c:2b:89:75:ba:e7:b7:95:2e:2d:34:7c:
         2e:21:a8:f5:7f:9a:eb:67:6a:30:61:d7:bc:35:6b:7e:7a:8d:
         77:19:8d:8e:a0:e1:c8:00:9c:7f:0f:3d:3b:41:27:ac:34:c9:
         8e:77:2e:14:4e:e9:09:06:59:15:33:fb:92:af:2f:4c:c8:de:
         3c:3a:b3:68:f6:4d:34:87:b6:cd:bd:db:e4:d9:24:33:3a:c3:
         77:4e:1b:9e:e0:6d:8d:2d:7f:dd:65:de:18:38:ec:b0:0d:33:
         88:12:9d:85:68:dd:f5:b0:b9:23:c3:e6:50:72:eb:ae:dc:42:
         2e:36:29:bd:e8:c1:11:f7:02:6e:65:5f:81:1d:dc:06:20:3e:
         27:41:11:e5:20:dd:6a:47:c9:19:06:77:41:ff:f7:58:15:8c:
         88:c4:d6:44:c1:c2:87:09:09:dc:64:0f:a8:90:77:88:42:bc:
         bc:d2:75:d7:3d:69:6e:93:fb:60:89:e0:30:b3:a9:94:f7:01:
         25:23:1b:59:9b:b2:0a:a5:17:28:5c:67:4d:be:d6:ea:ca:b8:
         2c:e3:8f:cc:0f:38:d6:75:ba:07:d4:d5:76:e0:33:c8:f0:9f:
         28:4d:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----