[Created by: generate-chains.py]

Certificate chain where the root certificate lacks a basic constraints
extension.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:30:93:e0:af:42:20:f7:92:d9:8d:63:e4:7e:ee:e3:df:49:cd:56
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2c:39:1a:67:64:64:af:b8:19:4f:41:9e:78:
                    a6:a8:fc:a4:43:70:a7:7c:23:f9:27:a0:7f:98:37:
                    e7:ee:fe:be:2d:82:65:9e:46:15:1e:fc:3d:70:36:
                    96:47:69:6a:c0:51:c5:f1:59:2a:d7:1e:3f:b3:2e:
                    df:ac:af:89:16:45:ed:71:ae:38:04:4d:5e:e7:b8:
                    d9:a1:45:14:a5:f9:a4:f7:e3:e7:e4:e9:ac:7e:82:
                    95:e6:5c:8e:ac:da:14:d5:2f:04:ed:48:f7:56:4b:
                    5a:98:72:0f:07:66:ca:17:a5:0e:b7:05:64:3b:6a:
                    97:ad:b1:7e:4d:b3:8c:d4:2b:23:3d:88:bb:c9:80:
                    04:d9:5b:1a:36:37:ab:d2:c7:06:a8:81:6f:62:b7:
                    c1:74:74:8e:ee:f6:6b:c0:15:28:44:50:85:dc:8d:
                    3b:e7:0b:82:9d:bd:db:20:69:1a:55:68:48:0e:84:
                    2a:25:26:ca:01:ad:16:7f:3c:30:d4:5b:47:9a:86:
                    fe:fc:90:b5:d0:bb:d3:ee:af:9a:80:3c:4c:da:46:
                    c8:db:36:68:89:51:fe:76:78:cf:22:eb:ce:62:d4:
                    2c:2b:c7:7c:24:48:64:ca:9b:91:b2:90:fc:c9:29:
                    65:70:83:60:05:1a:32:70:ca:12:f3:70:52:dd:3e:
                    82:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                98:FA:6D:F3:B3:9E:A3:B9:81:22:1C:C5:19:24:06:BC:D9:D6:92:ED
            X509v3 Authority Key Identifier: 
                keyid:C1:E9:0B:DE:AA:27:20:FA:0B:FF:DB:77:09:96:1E:9B:2C:0D:F7:70

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         b4:37:d0:b2:e6:04:26:d5:cf:ea:f2:91:5c:aa:03:17:35:07:
         21:bd:67:52:60:9c:c2:9e:79:6e:ef:5f:a2:05:74:6c:b4:75:
         7e:f1:3b:0f:2e:62:85:b2:33:3b:23:68:7c:67:e1:b6:e1:c4:
         b0:af:50:29:a7:73:fc:aa:b9:e0:f2:fb:7e:f3:f5:27:07:e6:
         26:c0:b8:51:06:7c:42:9d:59:b5:b3:2f:ae:ea:f4:e5:0b:9c:
         63:00:34:2c:46:cd:df:22:55:21:3b:78:23:b0:8e:0d:69:8d:
         66:92:16:90:83:fd:ad:46:60:7f:5f:87:61:7f:2f:0f:c2:8c:
         0f:7a:dc:b4:6e:cc:a7:80:88:3b:49:17:ef:fb:95:48:9b:80:
         b6:f4:32:95:e0:e8:e6:1a:97:2f:fe:c6:a7:ad:02:b8:ef:a7:
         25:42:cd:ea:bd:c1:64:6b:b0:89:6c:bb:fb:e6:9c:43:b8:51:
         03:0c:ed:03:01:44:5b:ef:ad:8e:59:aa:29:cd:2d:c4:c8:1f:
         55:66:c6:26:d8:6c:2d:07:ca:91:10:2e:04:54:5d:e1:ee:87:
         1b:22:ff:2a:b9:7a:e2:be:be:d7:51:d2:7f:3e:ee:e0:80:c8:
         58:fc:f1:7e:66:ca:6f:24:1a:bc:c0:98:a0:75:88:27:2e:28:
         59:30:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:55:78:34:50:50:34:15:fe:10:58:e3:0b:cb:6b:c3:c6:56:3d:16
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e6:c0:76:c5:4c:d0:8e:b3:87:07:91:66:aa:
                    f1:ae:93:8f:a2:83:2d:d5:05:91:b8:52:f6:2d:a5:
                    ff:fd:95:ee:85:0f:85:c3:eb:d7:8e:f7:6f:2a:c0:
                    15:de:ae:1e:62:62:12:64:c3:f7:c1:0f:05:a4:0f:
                    b7:33:69:92:66:57:93:4f:4e:04:43:bb:23:bb:c3:
                    c6:29:0b:42:68:1f:26:81:77:2d:91:f6:62:b8:e3:
                    9a:2c:78:2d:7c:1f:3a:f5:ce:f2:c2:75:39:5a:b7:
                    c2:23:f5:f5:ee:7e:a5:7a:45:c4:d4:1e:12:c8:a6:
                    40:44:64:07:ff:33:a8:ce:41:df:77:c4:01:f5:c5:
                    41:6b:4e:a0:ee:9d:36:63:5a:b0:e8:38:bb:bd:fb:
                    a5:7f:6e:5c:6d:c6:62:dd:05:2f:90:d4:fb:5b:18:
                    71:84:57:e2:c9:d3:cc:c8:36:5f:d1:78:20:4c:68:
                    83:1f:df:64:a3:11:9f:e8:bd:d4:bb:8e:04:63:0d:
                    3d:6d:a9:43:30:5d:f0:ca:e3:62:8f:11:9e:8b:8f:
                    de:9a:6e:6d:03:e5:8c:0f:6f:00:6e:1a:72:2c:13:
                    e0:a1:78:93:ef:2c:6d:2c:0a:8a:5c:02:65:50:36:
                    fa:da:07:ba:36:b9:21:eb:01:14:97:ab:19:60:be:
                    97:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C1:E9:0B:DE:AA:27:20:FA:0B:FF:DB:77:09:96:1E:9B:2C:0D:F7:70
            X509v3 Authority Key Identifier: 
                keyid:96:9F:CB:9C:5C:0D:06:9D:F1:3A:21:D5:22:F7:4B:75:2C:7D:D3:D3

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         0a:11:c3:21:b5:94:3d:5f:ae:33:72:18:c4:74:c0:cb:15:b0:
         22:74:39:5d:76:7b:77:a9:91:0d:02:7c:1b:0c:fa:d1:dc:94:
         f2:d3:38:01:f3:64:42:53:5b:0e:a7:a3:7e:8d:8d:0b:6f:1a:
         93:ab:17:3a:02:43:23:c6:c2:8c:40:32:fe:e9:e4:42:31:c2:
         4f:96:87:da:54:70:f0:85:31:7c:a3:a2:96:af:c6:a3:0a:26:
         68:3c:db:1b:dc:be:58:c6:c2:ef:62:a1:87:3e:01:4a:3c:c0:
         aa:fa:f5:30:d7:7d:35:3c:3b:f0:ef:7b:e9:f8:67:5a:f7:75:
         5f:0f:ae:63:a6:61:98:5a:21:8a:36:ca:59:40:75:60:4b:6b:
         cd:0e:99:d7:2f:fc:85:1d:81:4c:50:e0:66:1b:fe:8f:83:e4:
         bf:00:07:48:3c:ea:16:c4:43:8d:53:3a:44:bf:64:99:58:1e:
         72:38:f9:ec:63:ad:4e:e3:5a:7b:b3:22:0a:54:d8:49:41:e7:
         4f:f6:ad:df:3b:f2:c2:3d:d5:e1:62:30:4a:61:30:09:ea:2a:
         66:98:1e:a7:51:e1:cc:08:c2:32:5e:c7:77:2c:93:c0:6b:77:
         89:99:e3:f5:89:bb:62:6b:3e:96:25:ac:a1:79:2e:82:9b:e3:
         1b:4b:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:55:78:34:50:50:34:15:fe:10:58:e3:0b:cb:6b:c3:c6:56:3d:15
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:0c:2e:e1:46:5f:9d:dc:3a:16:51:56:2f:
                    4c:5c:f7:92:93:2a:a1:bf:d1:bd:15:cd:8a:f8:e3:
                    8a:a4:41:fa:9f:de:85:84:ff:cd:5b:7d:13:33:ca:
                    b8:8b:34:f6:85:73:a5:23:ef:ba:61:ca:18:9f:08:
                    ea:39:17:18:69:dd:3a:21:57:a5:6d:b2:63:a7:42:
                    ba:b6:8a:4e:e2:1f:ab:88:4f:ae:ca:1a:66:b8:79:
                    d2:94:73:b9:46:c4:be:89:31:53:c1:d8:b4:cc:1c:
                    6b:d9:0c:a3:5a:e3:a5:20:7c:a0:bd:d4:14:7a:14:
                    29:0c:b7:40:da:f5:fc:af:c3:91:65:78:b3:41:ee:
                    f5:9f:0b:22:0b:c1:f5:12:94:89:25:13:1b:dd:a3:
                    a3:44:7a:57:7c:40:17:e0:66:33:a9:27:7c:2e:6f:
                    9f:38:d3:fa:4d:67:80:39:33:36:e5:41:fd:ac:6b:
                    37:d0:84:75:e2:84:93:3b:8d:ce:8c:22:98:4e:05:
                    64:7f:df:fb:96:85:c5:ea:0e:11:24:f9:84:bd:17:
                    ce:15:30:86:ad:c6:de:2c:48:84:d0:45:d4:0b:1f:
                    13:e9:a4:ca:e7:69:c0:24:a1:23:5e:6b:4e:76:b4:
                    bd:d7:0d:96:94:b6:d9:8e:25:9b:1e:c9:a2:00:10:
                    47:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                96:9F:CB:9C:5C:0D:06:9D:F1:3A:21:D5:22:F7:4B:75:2C:7D:D3:D3
            X509v3 Authority Key Identifier: 
                keyid:96:9F:CB:9C:5C:0D:06:9D:F1:3A:21:D5:22:F7:4B:75:2C:7D:D3:D3

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
    Signature Algorithm: sha256WithRSAEncryption
         a0:63:51:25:66:b7:9a:52:c8:f3:a5:18:a4:76:b5:02:e8:a1:
         12:0e:f7:e0:92:32:6f:85:2a:d3:95:ae:c1:5d:11:11:53:c2:
         bb:85:55:a5:5c:71:f5:65:c6:f2:88:8a:a5:10:66:b6:bb:36:
         d6:d5:c3:c1:87:be:bc:5f:c6:47:87:63:de:ef:6a:d6:46:db:
         ca:b6:09:17:07:39:76:6d:3a:ef:69:37:05:0d:c8:24:51:1f:
         24:a7:c0:bc:44:a4:a3:57:28:f3:4f:ca:52:3b:1c:1a:3c:18:
         07:17:26:8c:ed:22:d0:0a:41:05:ae:cc:2c:b9:24:80:d5:22:
         1e:c0:eb:a7:48:fd:3a:c3:ee:89:95:6d:25:0b:45:86:70:11:
         69:da:11:38:c9:7a:3a:c1:b0:a7:f3:df:15:85:d1:66:ae:8f:
         2d:52:38:2d:db:32:c5:12:ba:e2:fd:b1:77:8a:ef:1b:8d:cd:
         99:85:33:e3:82:bb:42:f2:f7:92:56:4d:5d:4e:8d:82:54:23:
         e8:90:3b:32:d2:9e:24:a7:4b:58:86:ed:fe:bf:b5:8d:e5:a5:
         c3:af:d8:fa:92:df:bb:ae:8b:00:8c:64:e0:6c:53:5e:d9:14:
         bd:30:78:40:80:f4:58:cd:b1:92:50:c9:87:59:91:39:18:a9:
         ea:18:44:e7
-----BEGIN CERTIFICATE-----
MIIDZzCCAk+gAwIBAgIUCFV4NFBQNBX+EFjjC8trw8ZWPRUwDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw
MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3Dgwu4UZfndw6FlFWL0xc95KTKqG/0b0VzYr444qkQfqf3oWE/81bfRMz
yriLNPaFc6Uj77phyhifCOo5Fxhp3TohV6VtsmOnQrq2ik7iH6uIT67KGma4edKU
c7lGxL6JMVPB2LTMHGvZDKNa46UgfKC91BR6FCkMt0Da9fyvw5FleLNB7vWfCyIL
wfUSlIklExvdo6NEeld8QBfgZjOpJ3wub5840/pNZ4A5MzblQf2sazfQhHXihJM7
jc6MIphOBWR/3/uWhcXqDhEk+YS9F84VMIatxt4sSITQRdQLHxPppMrnacAkoSNe
a052tL3XDZaUttmOJZseyaIAEEd3AgMBAAGjgbowgbcwHQYDVR0OBBYEFJafy5xc
DQad8Toh1SL3S3UsfdPTMB8GA1UdIwQYMBaAFJafy5xcDQad8Toh1SL3S3UsfdPT
MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh
L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S
b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQELBQADggEBAKBjUSVm
t5pSyPOlGKR2tQLooRIO9+CSMm+FKtOVrsFdERFTwruFVaVccfVlxvKIiqUQZra7
NtbVw8GHvrxfxkeHY97vatZG28q2CRcHOXZtOu9pNwUNyCRRHySnwLxEpKNXKPNP
ylI7HBo8GAcXJoztItAKQQWuzCy5JIDVIh7A66dI/TrD7omVbSULRYZwEWnaETjJ
ejrBsKfz3xWF0Waujy1SOC3bMsUSuuL9sXeK7xuNzZmFM+OCu0Ly95JWTV1OjYJU
I+iQOzLSniSnS1iG7f6/tY3lpcOv2PqS37uuiwCMZOBsU17ZFL0weECA9FjNsZJQ
yYdZkTkYqeoYROc=
-----END CERTIFICATE-----