[Created by: ./generate-chains.py]

Certificate chain with policies and requireExplicitPolicy.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:08:4d:78:c1:3f:07:cd:a3:c6:78:9f:04:0f:8d:7f:53:59:b2:73
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:54:b8:f3:a9:51:97:5a:ab:40:dd:8f:a8:
                    4d:1c:3e:e2:4a:bc:ea:eb:f4:11:44:51:30:8c:9c:
                    b0:60:16:37:98:47:4a:c3:b8:b1:2e:b3:bd:c8:05:
                    3f:70:4c:b8:2d:57:43:3b:6f:da:9b:72:57:f6:45:
                    db:8d:e1:c8:08:80:d6:10:94:c9:2a:58:92:e9:a4:
                    2d:ce:a7:5b:64:bd:99:fc:16:ee:8e:87:fb:fc:05:
                    e8:06:13:b0:01:b7:c7:53:6f:20:34:40:c5:d4:0b:
                    e9:72:54:88:f8:38:2c:dc:6c:21:e0:9b:c5:d1:95:
                    79:f3:f2:3a:38:8e:54:0b:af:d6:74:98:37:28:86:
                    96:33:7c:63:e5:38:03:f2:7d:16:fe:fb:16:57:5b:
                    59:81:f1:83:86:11:4f:4a:96:17:80:e1:22:00:e4:
                    e0:7f:6c:b6:4e:ad:22:10:90:fb:2c:61:9c:4e:25:
                    23:c3:04:69:69:45:66:6a:e6:fc:0a:31:98:59:0f:
                    df:e5:45:37:68:d4:2d:b8:c4:20:16:f2:c0:db:c2:
                    7e:93:5b:0b:e2:26:46:ba:78:e5:fa:b7:e1:b3:86:
                    7a:72:85:26:ae:1c:c6:a6:e9:57:fd:c1:c7:6d:4e:
                    5f:59:3a:7a:76:f8:d9:f6:1b:e5:e9:c6:96:c4:14:
                    ce:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3F:54:44:D9:08:0D:47:C0:7F:78:3F:FE:2A:09:5F:9A:11:8F:B3:5D
            X509v3 Authority Key Identifier: 
                3D:93:4F:05:1D:3B:34:80:2F:A2:A7:1F:CA:9C:28:DC:C1:55:E2:67
            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://url-for-crl/Intermediate.crl
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: critical
                Policy: 1.2.3.4
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        63:69:e9:e2:b0:09:40:6b:26:74:bb:fa:01:d5:fb:c7:b7:aa:
        d1:bd:69:0d:ac:f0:94:56:21:8b:32:7e:4b:12:e9:a5:eb:ce:
        14:41:2a:23:17:eb:5f:df:dd:e0:e7:1a:9d:1e:cf:17:9f:26:
        81:9b:b4:b0:c3:28:67:5b:65:c9:d7:9f:21:9b:9c:01:97:a8:
        ec:44:8d:04:7d:fc:72:01:93:aa:92:84:59:42:d2:da:49:08:
        35:8e:d6:7d:89:a0:c3:70:6d:05:f7:eb:30:08:6e:66:2c:90:
        7c:33:e7:b8:81:d9:04:cb:12:db:a2:34:1a:c9:fa:d6:ef:af:
        98:84:bc:c9:a9:af:4a:d6:23:ff:b3:6d:d4:3c:0f:d8:f8:bc:
        10:1e:c6:29:06:6c:7c:5b:b2:f3:4f:96:95:79:69:7b:00:c0:
        65:04:84:0f:2e:28:e9:b2:a2:98:2d:b8:35:8c:09:c3:d4:f1:
        69:f6:31:d7:37:85:5a:72:46:07:11:56:fc:48:79:b7:02:ed:
        ba:a8:bd:4b:38:95:71:e8:e0:e0:99:2c:f9:19:bc:1e:61:f8:
        a3:26:61:31:c8:af:07:d2:1b:58:96:82:42:b0:f3:f0:6c:4f:
        54:0a:bb:fa:44:a2:92:89:90:c5:fc:1d:31:e3:08:4d:fe:97:
        b0:8e:b0:cc
-----BEGIN CERTIFICATE-----
MIIDtTCCAp2gAwIBAgIUdghNeME/B82jxnifBA+Nf1NZsnMwDQYJKoZIhvcNAQEL
BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTIxMTAwNTEyMDAwMFoXDTIy
MTAwNTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAwU5UuPOpUZdaq0Ddj6hNHD7iSrzq6/QRRFEwjJywYBY3
mEdKw7ixLrO9yAU/cEy4LVdDO2/am3JX9kXbjeHICIDWEJTJKliS6aQtzqdbZL2Z
/Bbujof7/AXoBhOwAbfHU28gNEDF1AvpclSI+Dgs3Gwh4JvF0ZV58/I6OI5UC6/W
dJg3KIaWM3xj5TgD8n0W/vsWV1tZgfGDhhFPSpYXgOEiAOTgf2y2Tq0iEJD7LGGc
TiUjwwRpaUVmaub8CjGYWQ/f5UU3aNQtuMQgFvLA28J+k1sL4iZGunjl+rfhs4Z6
coUmrhzGpulX/cHHbU5fWTp6dvjZ9hvl6caWxBTOnQIDAQABo4H+MIH7MB0GA1Ud
DgQWBBQ/VETZCA1HwH94P/4qCV+aEY+zXTAfBgNVHSMEGDAWgBQ9k08FHTs0gC+i
px/KnCjcwVXiZzA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91
cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0
dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEwYDVR0gAQH/BAkwBzAF
BgMqAwQwDQYJKoZIhvcNAQELBQADggEBAGNp6eKwCUBrJnS7+gHV+8e3qtG9aQ2s
8JRWIYsyfksS6aXrzhRBKiMX61/f3eDnGp0ezxefJoGbtLDDKGdbZcnXnyGbnAGX
qOxEjQR9/HIBk6qShFlC0tpJCDWO1n2JoMNwbQX36zAIbmYskHwz57iB2QTLEtui
NBrJ+tbvr5iEvMmpr0rWI/+zbdQ8D9j4vBAexikGbHxbsvNPlpV5aXsAwGUEhA8u
KOmyopgtuDWMCcPU8Wn2Mdc3hVpyRgcRVvxIebcC7bqovUs4lXHo4OCZLPkZvB5h
+KMmYTHIrwfSG1iWgkKw8/BsT1QKu/pEopKJkMX8HTHjCE3+l7COsMw=
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e0:57:1a:f3:9a:80:02:b6:c9:bd:be:0c:a5:21:0f:8b:78:67:70
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d4:36:ce:68:1f:c4:5f:a3:21:5a:43:7d:5e:54:
                    8e:a7:77:c3:5e:48:80:e7:05:4a:05:a2:c4:36:30:
                    2c:e2:0b:d9:8e:0c:df:98:4f:f0:6d:2b:12:ae:6c:
                    ae:3c:d9:d7:a8:c1:3c:0e:40:14:81:90:f9:ed:cf:
                    3f:e4:93:f4:5a:dc:89:57:f4:4f:ca:0d:c7:8c:32:
                    a0:b0:7b:d1:d0:b1:45:e6:5a:2a:32:c9:dc:db:7f:
                    af:46:e6:5b:1a:02:72:46:be:66:3b:98:67:e2:33:
                    c8:05:60:05:2a:7b:03:42:14:ba:62:f0:62:c0:7b:
                    75:58:06:c0:b4:b8:81:ad:23:e7:60:33:53:55:7e:
                    7c:78:7c:97:a5:09:fc:97:2c:49:51:77:48:49:39:
                    5f:fb:6f:b1:3f:eb:b0:6d:c4:d6:a5:9f:97:ba:8e:
                    19:5f:fe:d9:71:ee:8a:6a:0d:08:6e:5c:09:54:6f:
                    8c:f3:a1:74:08:6f:dc:36:69:00:e8:6a:40:82:6f:
                    de:ba:87:dd:32:f2:c8:60:f0:3f:5f:87:a3:e5:4c:
                    76:7f:77:75:46:47:c0:fa:c0:03:ce:3f:57:dc:9a:
                    ee:0c:3e:27:65:39:4b:5c:fc:dd:09:c9:80:d8:6c:
                    9c:ee:6c:8b:e7:99:43:b3:21:b5:10:9f:4a:aa:8e:
                    0b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3D:93:4F:05:1D:3B:34:80:2F:A2:A7:1F:CA:9C:28:DC:C1:55:E2:67
            X509v3 Authority Key Identifier: 
                B2:69:86:08:36:14:3E:66:79:B7:98:70:BE:30:9D:0B:73:00:6F:0E
            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://url-for-crl/Root.crl
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies: critical
                Policy: 1.2.3.4
            X509v3 Policy Constraints: critical
                Require Explicit Policy:0
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        28:a1:4e:4e:d5:82:36:24:6f:69:b8:2d:ab:a2:a6:64:32:48:
        7d:cd:18:0d:6a:d8:43:79:c1:6b:b9:f1:6b:70:ab:64:e3:b3:
        46:1f:06:61:99:92:21:ef:9e:18:38:4a:c0:3d:a2:b6:32:79:
        5d:c9:68:04:84:ba:a6:1a:a6:8c:f1:51:3e:ab:01:83:57:78:
        f8:38:80:e9:38:d8:db:40:ac:9e:94:e1:da:13:d9:33:4c:20:
        98:3d:da:6b:95:d0:64:6f:fd:6c:37:f1:fe:1c:ea:a5:71:49:
        9e:b1:24:94:0a:84:ff:60:b0:b0:8d:2a:54:2c:25:74:0d:18:
        1c:7e:9a:67:d8:82:ec:af:fc:88:2a:fb:9c:29:ba:a6:a9:1a:
        cc:cd:c0:71:b3:02:f3:d8:58:f2:d3:4f:0f:5a:19:da:28:3b:
        f3:5a:38:b5:5a:40:1a:05:13:16:9c:0c:d7:df:ef:0b:2f:2b:
        81:7b:01:30:d7:88:2d:8d:e5:b6:89:b8:98:4b:40:aa:0f:46:
        65:15:09:40:49:8f:93:0c:10:5e:b2:34:1a:e0:8f:7b:7d:90:
        35:df:64:1c:ce:08:0e:38:fa:cb:cf:f0:e4:62:a6:e7:15:dd:
        07:a5:b5:42:3b:d8:77:e7:8b:d1:1c:2a:3c:6f:c2:33:2c:f2:
        7c:14:59:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e0:57:1a:f3:9a:80:02:b6:c9:bd:be:0c:a5:21:0f:8b:78:67:6f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:ea:17:07:2b:f0:3b:dd:d2:24:53:f6:fa:
                    9f:47:c2:a7:6e:fa:04:f1:b2:fe:74:ef:ec:24:75:
                    07:fd:f3:7b:29:9c:17:1c:e5:41:df:34:4a:1c:2b:
                    4a:5f:8d:36:44:1a:5f:67:92:7a:2a:a8:85:7b:49:
                    b7:83:1d:c7:7f:44:c3:a7:09:3a:75:5e:00:43:db:
                    dd:91:41:28:a1:cd:13:11:35:3b:7a:92:fc:ad:98:
                    3c:ac:cb:85:77:a4:d0:3f:57:ed:67:69:9c:40:3b:
                    c4:0c:a3:32:3a:01:73:0c:ed:55:21:a8:be:b4:41:
                    ee:f3:6e:e9:04:10:9b:2c:7b:c5:2a:d2:87:52:ef:
                    12:84:87:82:5e:40:e3:bf:6a:47:33:60:22:1a:42:
                    63:45:ac:28:be:79:59:37:48:45:65:6b:13:89:bb:
                    58:6e:d8:4e:8d:b3:26:30:d2:c0:3e:d6:16:f2:08:
                    31:bf:2c:b1:c9:b7:c4:58:09:89:ee:52:21:fb:ab:
                    7a:f1:4e:b3:7f:a1:20:c3:99:9b:74:0d:d3:c4:c3:
                    3d:53:aa:cb:32:48:0e:8a:66:2b:07:09:8c:73:38:
                    ff:81:15:30:c9:12:39:d5:ec:44:32:81:df:ec:85:
                    c1:d3:45:d1:eb:82:61:f2:86:ad:1a:e1:a3:ee:a1:
                    a0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B2:69:86:08:36:14:3E:66:79:B7:98:70:BE:30:9D:0B:73:00:6F:0E
            X509v3 Authority Key Identifier: 
                B2:69:86:08:36:14:3E:66:79:B7:98:70:BE:30:9D:0B:73:00:6F:0E
            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://url-for-crl/Root.crl
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        55:ce:69:0a:bf:08:3a:d2:a3:2d:00:b0:5f:b4:f9:e1:26:3b:
        3b:28:e5:45:c5:e4:8f:46:f0:1a:a2:ae:d4:e7:a9:dd:39:08:
        dd:d4:80:52:75:4d:35:95:50:b6:44:49:c0:48:c1:3f:c4:19:
        1b:b1:71:73:65:9b:78:a1:1d:79:01:09:d8:46:e8:b0:6b:e3:
        77:b3:a0:4e:6b:ff:1a:e1:63:12:56:b7:df:4d:d9:f4:ab:fc:
        5f:a5:e7:e1:38:28:80:a6:cb:fd:b1:ba:32:34:2e:c9:90:9f:
        9a:8f:c2:40:ab:04:42:8c:ea:b4:55:79:e3:e5:7d:73:e6:0f:
        63:95:76:49:94:44:16:57:7f:4f:2b:6a:28:16:ff:01:e4:1c:
        ad:b8:14:10:d2:10:17:df:65:36:f7:08:98:c3:c3:f2:6c:c4:
        70:dc:8f:e1:67:f0:62:eb:19:21:8c:c0:a6:53:20:ff:4d:b8:
        80:a8:3d:6d:15:6b:23:5d:06:70:fa:2a:87:ec:ff:20:96:f8:
        31:1c:23:93:f5:a4:03:e9:11:c5:0b:da:cf:7e:60:86:a8:da:
        c5:fe:5c:eb:dd:b8:67:72:5c:d9:16:c4:af:a8:41:aa:38:c4:
        40:0a:17:fd:06:89:b5:c4:7a:2a:1b:0d:49:23:9e:ed:55:e3:
        c5:ec:48:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----