[Created by: ./generate-chains.py]

Certificate chain where the target certificate contains an unknown X.509v3
extension (OID=1.2.3.4) that is marked as critical.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9a:ac:ff:32:38:c0:2f:b6:e5:63:63:94:45:6d:aa:aa:c4:b6:e5
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:ea:3a:1c:14:a1:db:ad:2c:18:3d:25:9c:
                    dc:1c:0f:2b:1e:42:df:c2:7c:b4:39:e6:4b:45:eb:
                    d3:a2:1c:2b:dc:f2:8c:08:f5:81:df:bd:fa:a2:1a:
                    1c:5c:99:cb:00:c7:31:02:c8:44:5f:31:cf:9c:82:
                    6d:3c:0c:5d:f7:d6:cc:91:fe:f3:e7:7a:08:17:85:
                    d5:75:61:ee:dd:66:55:3c:e2:68:98:36:19:20:e4:
                    9b:cd:24:6c:a3:5d:89:84:80:2e:c7:11:4e:c1:82:
                    b2:80:ce:0f:e9:6a:42:54:10:fb:c0:0a:53:be:19:
                    01:38:ba:06:c5:93:93:1c:84:aa:25:c7:c5:9a:4d:
                    32:2e:a4:13:5e:6d:07:d6:9d:e5:b0:29:63:da:14:
                    b7:62:51:63:93:dc:28:ae:4a:bc:35:ac:c0:06:ea:
                    ea:0b:d5:70:61:3b:05:78:e4:d3:ad:c3:ad:95:f1:
                    48:e5:79:a6:dc:12:1f:14:4f:21:9f:ca:6f:7a:dd:
                    d6:45:c8:8a:60:96:1c:02:06:16:18:80:21:58:6a:
                    f6:83:3e:1a:98:b8:b2:a9:22:44:c2:25:e9:dc:a9:
                    aa:bf:1d:2e:3f:2e:a1:78:08:93:04:4c:c4:1f:f9:
                    b3:34:9f:a7:78:5b:02:a6:ca:d3:1f:fa:ba:4d:34:
                    a2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D6:55:4E:AC:07:84:35:A9:0D:9A:63:45:82:73:4E:A4:CC:53:B0:02
            X509v3 Authority Key Identifier: 
                8A:E3:E6:F6:58:6F:1C:90:B4:67:A5:14:D8:64:E7:F7:00:77:61:01
            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://url-for-crl/Intermediate.crl
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            1.2.3.4: critical
                ....
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        2d:da:b3:73:a9:3c:2f:ac:6f:a6:db:80:c2:82:ea:0f:6e:bd:
        58:35:f5:d5:69:3f:73:26:e6:80:cd:39:d1:cf:38:f8:19:dd:
        f7:cf:57:70:44:3b:83:5a:8d:91:7b:02:a9:e8:ef:06:1e:b6:
        4b:97:ff:0e:96:ee:fe:85:ea:b4:93:ba:0e:b1:15:ef:ff:f6:
        be:0d:f2:2a:d6:2d:df:43:a9:e8:a0:e3:50:bb:56:af:51:05:
        1d:50:f3:58:f4:41:f0:ea:b4:1e:34:99:ac:d5:b8:34:78:96:
        73:2e:62:e5:7e:b5:1d:e4:08:52:b4:8f:28:bf:b7:75:23:71:
        f2:31:b2:ad:eb:4c:94:ec:79:09:0c:8b:94:38:a8:c8:82:e8:
        42:e4:72:50:bc:4b:8e:0d:e8:c0:77:a7:94:8e:d4:35:36:73:
        d4:1e:32:8f:19:14:8e:eb:26:61:bb:c9:9c:b5:71:08:40:61:
        52:8f:1e:a3:3d:01:2c:c8:a5:b5:c7:ac:42:ee:75:2b:a2:e7:
        77:65:98:1d:02:1c:95:d3:8a:1d:17:71:82:86:5c:f3:a9:44:
        e0:54:c5:51:84:b4:3c:c9:f1:bd:25:2d:cb:23:f2:72:d2:8c:
        f9:2d:c5:2a:4b:14:f5:df:65:53:e5:fb:2e:71:02:03:c5:6e:
        6f:0a:68:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:66:51:84:c2:7e:fc:0c:cf:05:27:4c:bc:d3:55:23:ed:cb:19:f9
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:91:dd:b5:74:07:ba:8a:93:3c:ca:0c:11:
                    5d:36:29:ec:53:1e:32:8b:90:ae:f9:c0:db:d2:7e:
                    78:ea:3c:58:57:5f:70:4a:96:9a:93:58:d3:7e:42:
                    60:bd:78:07:38:6b:e4:16:8f:32:17:30:b1:76:95:
                    56:6d:7e:e5:9e:f9:0f:f8:5a:99:ee:80:e1:e6:fc:
                    d6:af:33:61:aa:da:19:98:7f:da:27:2f:80:bc:96:
                    2e:51:81:f8:1a:63:27:0b:ce:ee:02:16:55:4a:96:
                    0a:c5:c1:7e:99:95:e8:70:e7:4d:2b:2f:bf:d3:d2:
                    2d:25:7d:0f:b2:50:96:36:95:e5:2c:ca:0e:59:b5:
                    d4:7c:31:57:96:fa:be:c6:d5:9a:83:b5:96:f2:1c:
                    4a:20:cf:be:0e:7f:42:4f:a7:b4:5b:e2:01:f4:ed:
                    59:c4:6e:51:a1:a5:aa:a7:1f:04:ce:e0:d2:2c:ff:
                    a3:74:c7:e4:2a:a8:d2:7f:cd:f1:56:86:67:fe:75:
                    22:05:f7:2d:3b:3b:ce:5c:b9:95:4e:e5:ca:d8:89:
                    f6:b3:12:27:b4:22:6b:fb:83:f9:0e:de:a8:be:38:
                    5b:15:66:81:3b:62:d7:50:12:29:69:5b:c5:5a:99:
                    97:aa:51:c3:36:88:97:c9:c1:90:53:4f:b3:ec:99:
                    3c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8A:E3:E6:F6:58:6F:1C:90:B4:67:A5:14:D8:64:E7:F7:00:77:61:01
            X509v3 Authority Key Identifier: 
                52:00:A4:BE:8B:5F:23:63:5E:31:05:87:F4:6B:50:A7:01:70:63:DA
            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://url-for-crl/Root.crl
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        03:01:bd:9d:2d:b0:21:65:4d:11:4b:8d:72:4a:45:c5:cf:0a:
        b3:df:9c:a4:0a:2c:c0:10:61:ce:91:c2:79:ef:f8:90:9e:66:
        aa:ba:b0:2a:05:bf:76:8d:4d:1b:43:ff:cd:24:d7:79:f9:49:
        73:25:6b:47:d8:3a:59:ab:fa:da:11:5e:7e:ce:bb:07:21:e4:
        ea:30:b5:14:b6:34:36:f9:b4:94:ec:31:ae:1f:f2:02:96:68:
        6b:d2:3c:ce:29:7f:0d:af:35:c5:a7:c3:1c:75:b3:c8:04:96:
        7b:3e:b7:10:fa:25:00:8e:f4:f3:65:46:fc:09:5c:19:c4:69:
        56:44:49:1f:db:04:09:04:0b:3e:72:fb:f8:ac:d6:23:31:ec:
        37:70:fa:8b:db:d1:80:25:1f:44:68:ff:48:e0:c2:c0:8e:9d:
        02:ee:ff:e3:b6:ac:22:1f:7e:c4:59:94:f7:06:05:19:23:ff:
        4a:c9:16:99:94:3e:2e:ba:86:6c:01:31:01:1d:17:2c:f7:0b:
        5c:02:8a:2d:28:73:a7:81:b9:8f:91:f7:a3:0b:2a:16:98:e7:
        8d:5c:31:95:48:59:ce:1b:7e:2b:8c:79:1e:c1:27:11:20:07:
        83:ad:b5:1c:aa:77:57:7e:bb:13:19:52:6a:13:6b:5d:32:bf:
        2a:26:5b:5c
-----BEGIN CERTIFICATE-----
MIIDgDCCAmigAwIBAgIUBmZRhMJ+/AzPBSdMvNNVI+3LGfkwDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw
MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALjPkd21dAe6ipM8ygwRXTYp7FMeMouQrvnA29J+eOo8WFdf
cEqWmpNY035CYL14Bzhr5BaPMhcwsXaVVm1+5Z75D/hame6A4eb81q8zYaraGZh/
2icvgLyWLlGB+BpjJwvO7gIWVUqWCsXBfpmV6HDnTSsvv9PSLSV9D7JQljaV5SzK
Dlm11HwxV5b6vsbVmoO1lvIcSiDPvg5/Qk+ntFviAfTtWcRuUaGlqqcfBM7g0iz/
o3TH5Cqo0n/N8VaGZ/51IgX3LTs7zly5lU7lytiJ9rMSJ7Qia/uD+Q7eqL44WxVm
gTti11ASKWlbxVqZl6pRwzaIl8nBkFNPs+yZPPMCAwEAAaOByzCByDAdBgNVHQ4E
FgQUiuPm9lhvHJC0Z6UU2GTn9wB3YQEwHwYDVR0jBBgwFoAUUgCkvotfI2NeMQWH
9GtQpwFwY9owNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs
LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m
b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/
MA0GCSqGSIb3DQEBCwUAA4IBAQADAb2dLbAhZU0RS41ySkXFzwqz35ykCizAEGHO
kcJ57/iQnmaqurAqBb92jU0bQ//NJNd5+UlzJWtH2DpZq/raEV5+zrsHIeTqMLUU
tjQ2+bSU7DGuH/IClmhr0jzOKX8NrzXFp8McdbPIBJZ7PrcQ+iUAjvTzZUb8CVwZ
xGlWREkf2wQJBAs+cvv4rNYjMew3cPqL29GAJR9EaP9I4MLAjp0C7v/jtqwiH37E
WZT3BgUZI/9KyRaZlD4uuoZsATEBHRcs9wtcAootKHOngbmPkfejCyoWmOeNXDGV
SFnOG34rjHkewScRIAeDrbUcqndXfrsTGVJqE2tdMr8qJltc
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:66:51:84:c2:7e:fc:0c:cf:05:27:4c:bc:d3:55:23:ed:cb:19:f8
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:83:7c:7e:0c:6a:e8:93:2c:f8:e6:80:17:
                    e6:2a:91:f2:1d:1a:b1:51:6e:3e:4d:96:bd:a1:29:
                    f3:bd:ce:46:17:dc:5f:ed:b7:33:d8:17:31:80:b1:
                    12:f3:bb:86:1d:4a:a7:61:dd:51:15:a8:9d:50:25:
                    4f:93:5b:8c:a6:43:30:a5:46:7e:80:74:51:17:66:
                    61:ba:c0:9d:f5:53:e4:4d:02:58:a4:27:ac:ef:35:
                    eb:01:e6:0d:0f:a2:67:b3:95:1d:33:d3:70:55:6d:
                    73:80:dd:c7:dc:21:c6:58:9a:7d:cb:e6:9d:e2:af:
                    7f:14:02:7c:f8:45:ff:5c:74:7a:7d:b1:35:1f:74:
                    0f:e7:0d:97:51:58:15:41:07:fa:12:99:2a:84:92:
                    48:9b:08:ee:ad:26:37:15:3e:7e:7b:b6:1e:94:36:
                    be:b9:d8:b6:6f:27:71:13:d1:3e:b7:9e:9d:d6:1e:
                    e1:cb:7b:2b:ab:20:46:e0:08:9c:54:5b:c6:db:c2:
                    57:d3:67:ee:00:cf:d2:cb:0b:64:31:a7:9c:97:f5:
                    4b:37:db:7d:d5:dd:91:a7:ed:dc:0c:2f:9c:04:42:
                    50:46:8a:59:d2:9c:10:d7:0c:25:d9:79:de:e1:4c:
                    3d:4a:5a:3f:2c:6c:20:a1:60:9f:24:69:1a:0a:f9:
                    6e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                52:00:A4:BE:8B:5F:23:63:5E:31:05:87:F4:6B:50:A7:01:70:63:DA
            X509v3 Authority Key Identifier: 
                52:00:A4:BE:8B:5F:23:63:5E:31:05:87:F4:6B:50:A7:01:70:63:DA
            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://url-for-crl/Root.crl
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        8c:cc:8d:39:d4:a7:3f:73:9f:db:20:71:ed:d6:e0:94:76:4f:
        ce:d3:05:24:82:bf:31:94:30:bd:7a:77:88:09:95:0e:79:79:
        20:48:59:6a:3c:a6:a0:f3:3b:54:f0:3c:af:83:3d:22:a1:07:
        7a:5b:f0:16:97:b8:ee:a4:d5:5a:f4:1e:89:e5:d3:fb:d0:b2:
        cc:81:13:65:57:0f:2c:52:cc:b2:8b:a6:2d:b0:eb:e6:4e:12:
        ae:31:e4:5a:5c:c4:65:33:8d:3b:fe:55:c5:65:74:80:92:25:
        ef:e3:25:92:f1:b2:90:3f:59:c0:94:0b:fb:26:d8:4e:2f:21:
        b2:69:7c:37:fd:28:36:b5:10:c8:04:46:28:3e:ff:5e:39:74:
        50:4d:59:ab:a2:75:bf:ad:78:3a:b2:b6:0c:37:21:78:0f:8c:
        73:b8:cc:36:02:ba:5f:1c:eb:c5:7b:77:c5:50:9e:3b:7e:17:
        ce:17:73:50:d0:4c:46:86:f8:0c:d9:d1:eb:bb:3f:e7:f3:6e:
        09:27:49:0b:8f:70:2e:64:8b:15:2e:f2:16:a2:fe:0f:01:87:
        45:b8:2d:a3:a9:e2:5b:0c:f0:e8:79:db:cd:30:45:86:4e:49:
        e7:37:38:b8:71:28:92:3a:0e:ac:1c:81:25:d7:d3:1a:c8:e5:
        1d:47:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----