[Created by: ./generate-chains.py]

Certificate chain where the root keyUsage extension is present but does not
contain keyCertSign.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9c:b5:b6:68:93:5e:c6:e1:a7:65:67:49:b3:e4:0e:bd:5e:63:b4
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:a4:b9:20:81:72:4b:f5:2c:50:7e:3f:1a:
                    85:27:5b:2d:50:7c:e5:36:fd:9c:ac:26:a0:7d:b7:
                    94:d5:6b:fd:c3:46:1a:dc:4d:10:45:98:cc:87:8d:
                    af:fc:0e:bc:c9:b2:61:4b:8c:c2:9b:c8:da:7b:05:
                    b3:3b:e0:21:95:a5:9c:01:72:34:48:3d:e4:44:f2:
                    e7:b6:6b:58:f4:8d:60:92:c8:91:29:41:23:29:23:
                    fd:da:62:d0:c3:78:92:5f:01:09:55:2e:3a:a2:b3:
                    2c:2d:c5:cd:79:26:7a:66:bc:e3:a5:17:51:ae:b7:
                    29:50:75:10:6f:2c:55:a9:79:04:21:05:3b:14:32:
                    65:7c:3a:2c:33:ea:6b:72:20:f1:87:31:f2:8f:27:
                    69:4f:50:1d:c2:18:36:8e:b8:6d:c4:b8:0b:7a:23:
                    87:e1:48:84:ec:44:98:77:df:a7:7a:06:37:4d:42:
                    33:40:e2:b2:c9:67:2f:94:20:69:5c:6d:30:1a:b8:
                    c5:60:9e:32:6e:4d:b2:85:de:94:b9:86:50:f9:0c:
                    72:06:34:bb:f0:4a:fc:cd:c8:89:7b:eb:69:e5:64:
                    e8:55:4c:12:79:cc:81:88:26:f6:59:22:d5:60:8c:
                    36:4f:96:30:e2:ea:f4:10:dc:82:08:d2:3b:e2:05:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A9:6C:19:42:95:E3:95:C7:FF:D2:0F:BD:2C:E9:43:1F:2E:09:A2:C7
            X509v3 Authority Key Identifier: 
                5E:60:7B:07:9D:3D:65:C3:D3:DE:FB:C8:28:BE:34:22:10:C9:C4:A2
            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://url-for-crl/Intermediate.crl
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        14:bf:fa:03:43:bd:68:2c:77:55:2b:4a:49:ed:1b:71:4d:50:
        0c:91:f8:c0:2c:db:66:d8:a9:45:86:25:f6:cf:3a:db:94:e9:
        c2:c9:76:3f:c1:b3:1f:58:08:e8:05:d2:2f:de:82:35:ad:87:
        56:c7:a8:d9:2c:e4:1a:a9:3f:91:52:cc:82:1b:2d:6d:83:99:
        7e:2a:0f:90:93:a7:d3:09:a6:53:49:bc:d2:73:08:73:77:9c:
        5d:d8:7b:3e:ae:42:e3:2d:d5:89:1c:45:de:06:3d:99:a9:e8:
        63:f9:27:f7:01:1c:aa:85:00:1e:37:11:8d:4b:c0:a0:b4:fe:
        16:30:6f:da:88:8e:a9:34:33:9b:9d:6c:d7:f2:c8:e6:86:9d:
        f4:07:60:7e:86:fc:fb:4a:22:a4:cf:84:95:dc:da:cd:35:46:
        71:d3:d3:71:e2:50:0b:a9:8c:25:1e:dc:13:9d:f6:e2:90:fa:
        dd:64:a2:d4:d8:04:fd:64:eb:77:c7:87:88:b5:1a:90:0b:d1:
        e3:5f:5c:94:3a:8d:3b:6b:ad:f7:9c:27:8f:dd:a2:b7:de:64:
        fb:2f:c1:8e:b0:49:88:30:e8:2e:c9:49:26:a2:ad:3f:f8:b5:
        4c:7a:d0:42:33:18:ae:fc:c1:29:66:8a:3d:7b:88:83:48:f6:
        77:c0:02:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e3:4d:7d:5e:fd:13:7b:9f:32:55:f3:77:55:e6:39:52:6f:ef:40
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9c:38:da:61:b8:ad:0d:aa:de:44:df:52:78:01:
                    82:89:fb:5f:bd:fc:a9:79:d0:8d:10:5c:3c:4e:b7:
                    b5:43:36:bc:05:3a:0c:4e:54:88:00:45:fb:33:25:
                    ca:cf:3a:aa:ad:a4:de:d2:2e:c1:53:44:b8:f5:58:
                    e7:27:19:5a:70:34:71:c7:4d:77:1f:53:f2:66:b9:
                    79:e8:c2:10:8c:2f:5d:19:17:7e:e3:26:7e:0c:5d:
                    8e:ae:85:01:f7:05:ac:ce:18:5d:7c:a4:fa:fc:38:
                    e6:18:63:a5:4c:d0:a3:cb:a3:e6:47:ad:5f:ec:32:
                    fc:11:02:87:cb:fa:87:c9:38:aa:b8:b2:7e:98:99:
                    1b:4e:f3:01:fc:48:6a:60:a5:29:80:3c:0c:50:23:
                    3a:ae:0a:a6:d4:29:69:1e:15:34:ed:93:31:fb:30:
                    d4:d6:23:59:94:89:fa:99:b4:16:d8:04:63:d0:c3:
                    a9:2d:be:ff:6a:84:c7:54:bb:e8:eb:bd:16:5b:88:
                    33:10:1b:6e:20:4f:60:49:56:09:86:dc:95:fc:c5:
                    d9:2c:de:03:32:88:fc:3a:84:06:48:92:10:7c:2d:
                    b9:6a:25:fd:93:c0:51:75:bd:54:e7:ba:0b:bb:d8:
                    b3:f5:60:55:9e:c7:06:70:fd:f3:f0:13:8e:a8:33:
                    17:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5E:60:7B:07:9D:3D:65:C3:D3:DE:FB:C8:28:BE:34:22:10:C9:C4:A2
            X509v3 Authority Key Identifier: 
                20:1D:40:05:AB:57:09:3B:3A:83:BE:19:65:15:EB:74:EF:0C:0D:D7
            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://url-for-crl/Root.crl
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        12:3c:5d:46:a3:a4:11:4c:f6:d7:cc:92:61:b0:fd:ec:b6:12:
        37:3f:52:43:39:5e:8b:ff:5f:a9:09:3e:3b:3a:e4:c9:ec:59:
        00:8d:08:12:f9:b5:bd:8b:f4:41:dd:ff:d4:5c:5f:58:e7:e7:
        8c:a9:96:60:f0:78:27:7c:ca:da:24:67:93:ff:72:58:50:6b:
        8c:f2:11:da:8b:27:1b:68:9a:e0:9d:59:78:64:0d:d1:c4:c2:
        72:5f:9f:ef:32:d6:65:10:38:62:54:97:d5:03:cf:c4:a5:34:
        f6:d2:d0:dd:b4:fc:08:49:2d:43:55:7c:2d:43:a1:1c:30:65:
        b2:30:f8:5a:0a:ce:e8:1e:ad:c0:41:2d:d3:a2:64:76:3b:e8:
        82:3a:5b:93:f3:e8:84:de:7e:20:8d:05:06:2b:82:fd:6d:7c:
        35:6a:04:05:c0:6c:1b:91:6d:db:b3:a7:a5:35:42:9f:af:69:
        22:81:a9:f7:58:1c:fc:f1:31:54:26:f6:c5:b9:67:d0:da:eb:
        01:bd:69:10:de:ea:d3:95:29:ab:f2:59:8d:62:b9:01:b2:32:
        75:b7:47:3c:39:51:5d:be:46:48:da:19:f2:a8:61:8c:5f:cf:
        9c:a9:c9:92:a8:4e:ef:5c:8a:3f:73:fd:38:91:c2:90:33:c6:
        60:8e:67:22
-----BEGIN CERTIFICATE-----
MIIDgDCCAmigAwIBAgIUVONNfV79E3ufMlXzd1XmOVJv70AwDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw
MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJw42mG4rQ2q3kTfUngBgon7X738qXnQjRBcPE63tUM2vAU6
DE5UiABF+zMlys86qq2k3tIuwVNEuPVY5ycZWnA0ccdNdx9T8ma5eejCEIwvXRkX
fuMmfgxdjq6FAfcFrM4YXXyk+vw45hhjpUzQo8uj5ketX+wy/BECh8v6h8k4qriy
fpiZG07zAfxIamClKYA8DFAjOq4KptQpaR4VNO2TMfsw1NYjWZSJ+pm0FtgEY9DD
qS2+/2qEx1S76Ou9FluIMxAbbiBPYElWCYbclfzF2SzeAzKI/DqEBkiSEHwtuWol
/ZPAUXW9VOe6C7vYs/VgVZ7HBnD98/ATjqgzF/8CAwEAAaOByzCByDAdBgNVHQ4E
FgQUXmB7B509ZcPT3vvIKL40IhDJxKIwHwYDVR0jBBgwFoAUIB1ABatXCTs6g74Z
ZRXrdO8MDdcwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs
LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m
b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/
MA0GCSqGSIb3DQEBCwUAA4IBAQASPF1Go6QRTPbXzJJhsP3sthI3P1JDOV6L/1+p
CT47OuTJ7FkAjQgS+bW9i/RB3f/UXF9Y5+eMqZZg8HgnfMraJGeT/3JYUGuM8hHa
iycbaJrgnVl4ZA3RxMJyX5/vMtZlEDhiVJfVA8/EpTT20tDdtPwISS1DVXwtQ6Ec
MGWyMPhaCs7oHq3AQS3TomR2O+iCOluT8+iE3n4gjQUGK4L9bXw1agQFwGwbkW3b
s6elNUKfr2kigan3WBz88TFUJvbFuWfQ2usBvWkQ3urTlSmr8lmNYrkBsjJ1t0c8
OVFdvkZI2hnyqGGMX8+cqcmSqE7vXIo/c/04kcKQM8Zgjmci
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e3:4d:7d:5e:fd:13:7b:9f:32:55:f3:77:55:e6:39:52:6f:ef:3f
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:55:f3:0c:19:87:95:61:61:db:6c:07:71:
                    bb:94:fd:a5:8d:cc:a7:b2:d6:0a:36:85:0a:07:1c:
                    6b:e2:06:63:06:2b:ca:c6:ac:a8:fe:9b:02:f4:c0:
                    bc:cf:12:cd:49:18:2c:90:35:55:16:a1:2b:49:77:
                    0a:a3:e2:04:22:e8:2c:58:21:7c:f4:b6:bd:19:61:
                    c6:50:4f:a8:0f:b1:e9:96:e7:fc:f6:1d:bb:ad:58:
                    69:25:e9:db:6d:91:cc:61:2b:e5:93:9d:a9:37:c3:
                    f3:29:74:58:cd:b9:85:48:b8:ca:49:14:7b:18:54:
                    ee:c5:c7:18:98:48:91:f8:c2:c2:ec:15:67:27:bf:
                    a6:1b:29:25:97:67:ce:07:25:13:56:1a:b0:42:c8:
                    1d:1b:33:49:83:f4:da:67:52:79:22:3c:0d:9f:0c:
                    e5:91:87:5f:fe:f6:43:70:bc:2f:68:c8:d6:37:8f:
                    cf:97:7b:c9:d6:3f:9e:06:c6:b0:ea:20:b6:7f:b0:
                    33:a0:0f:5b:05:2a:1a:02:b9:22:80:d8:1a:bb:dc:
                    81:db:68:cb:d7:c1:99:6e:34:f7:f5:b2:72:94:94:
                    c4:0e:04:8c:6d:b7:5f:6b:bb:c5:3f:6b:50:08:42:
                    9a:cc:5f:41:96:ff:a2:fd:67:37:38:77:6f:d3:f4:
                    2c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                20:1D:40:05:AB:57:09:3B:3A:83:BE:19:65:15:EB:74:EF:0C:0D:D7
            X509v3 Authority Key Identifier: 
                20:1D:40:05:AB:57:09:3B:3A:83:BE:19:65:15:EB:74:EF:0C:0D:D7
            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://url-for-crl/Root.crl
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        24:3d:9b:fe:64:91:03:db:33:58:d3:74:2a:57:a5:82:48:28:
        80:2e:57:82:09:ff:3d:6e:1a:f4:2d:c3:ee:90:9b:07:88:1d:
        25:97:65:5b:ef:90:54:b4:61:86:4c:15:5e:1a:a5:ee:d4:41:
        af:6f:0a:2b:4e:b0:75:bd:d8:2c:8e:20:e9:6f:7a:d1:1b:4a:
        b6:2d:c6:60:be:cb:56:7d:f1:c3:06:03:cd:c4:23:25:1f:09:
        f5:44:d1:7c:9e:48:29:b4:a6:a7:55:40:f7:11:05:dc:45:5c:
        45:3f:2d:a6:23:54:e7:74:a8:d8:a3:81:23:00:77:64:9c:d3:
        1e:f1:f1:33:b6:a5:21:8e:af:a9:14:f5:37:6a:e3:6f:82:9f:
        65:6d:ab:de:0a:a5:29:62:d9:01:57:bf:69:48:c9:93:be:c2:
        2d:4b:e6:ed:0e:1e:e5:d8:fe:9c:8b:fc:36:09:08:45:f8:31:
        45:21:22:0b:62:c3:61:82:8f:65:bb:01:14:37:c2:b0:31:2f:
        a2:40:b9:91:21:54:50:b6:24:39:6b:c1:a5:90:3f:b4:77:9c:
        13:d7:0a:dc:3d:85:ef:77:fa:53:6b:fc:cf:8a:3e:45:db:5c:
        8b:4b:6b:a5:d8:ee:0b:19:f2:c1:a3:02:e0:ba:36:43:c8:e8:
        8b:c8:9a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----