[Created by: generate-chains.py]

Certificate chain where the supposed root certificate is wrong:

  * The intermediate's "issuer" does not match the root's "subject"
  * The intermediate's signature was not generated using the root's key


Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d4:ce:21:aa:ed:06:7b:56:9b:0b:40:d4:28:fb:ff:a9:d9:2b:9b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:e1:c8:d6:ce:ed:3b:b7:8a:5b:17:c2:9e:
                    0c:04:f4:4e:ba:ad:1b:cf:c0:63:b7:c9:01:e9:7a:
                    28:d4:d8:0b:71:36:af:02:f6:44:fc:ce:5e:84:50:
                    fb:5f:ef:a0:b8:b5:77:62:c0:6c:9f:8f:4f:64:52:
                    67:04:0b:d3:92:31:a5:79:f3:8d:11:03:03:a2:c0:
                    da:ef:8f:b5:68:f8:55:f0:ac:9b:05:3a:df:ea:7b:
                    3b:06:f2:de:e3:b2:c5:27:3e:b9:39:90:c0:27:0d:
                    de:6c:a2:8e:e4:2e:f9:95:13:37:df:20:12:28:ae:
                    82:5e:91:3a:cb:75:ae:55:fb:07:d6:40:48:cd:6f:
                    9c:3e:07:0f:48:d1:8f:ba:db:fa:b2:7c:ce:29:10:
                    e0:6b:48:36:80:db:4c:10:19:a1:28:fb:e0:b5:4f:
                    b2:89:40:b7:6b:9a:af:a1:9b:b0:52:03:23:16:fb:
                    0f:5d:c6:c9:f2:98:08:c5:07:85:76:30:57:46:be:
                    85:46:ed:14:74:60:00:61:ce:f7:88:62:6c:0b:a2:
                    41:9c:5a:27:3f:e5:29:9c:36:73:a3:04:8b:ab:74:
                    2d:1e:f5:96:f7:b4:c2:51:77:a9:9c:ef:ac:fd:bc:
                    aa:cf:ba:98:cf:6c:1b:fc:e9:20:8c:dc:17:45:49:
                    12:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                14:7E:08:D5:73:67:A9:9C:5B:C1:26:14:D1:96:8E:09:88:11:32:67
            X509v3 Authority Key Identifier: 
                keyid:3F:EE:51:69:3A:24:09:D6:26:3C:A4:08:22:1F:0D:77:7D:D5:E7:3B

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         33:6d:f9:bc:77:a5:f0:77:f8:8c:5e:18:52:45:93:6e:ed:01:
         9f:9e:7d:4a:d0:d8:6b:6b:35:92:cb:64:2f:89:7d:ed:42:0d:
         90:ad:d8:18:01:66:13:6c:4d:7c:6d:14:62:26:60:b4:37:94:
         c1:24:c5:cb:a1:a2:ab:b2:28:0e:47:3e:2c:6d:2b:7c:ed:55:
         3f:55:69:28:7f:97:a4:f6:b9:45:73:5d:3b:cf:b9:48:be:7c:
         fe:40:0e:ac:08:4b:6b:e5:4f:31:14:3f:1b:04:48:85:d1:65:
         65:76:6a:5f:3b:f2:04:48:c2:e1:20:7c:91:a8:bf:84:44:1a:
         4f:28:52:e6:f9:cd:f2:5b:ad:5f:71:2e:69:57:cf:1e:c4:68:
         5d:d3:4d:f8:0e:a7:7b:4d:c7:dd:ce:d8:eb:80:f1:a3:31:d3:
         ac:52:0a:ff:4c:58:a9:d6:4c:91:8b:79:66:30:6b:7d:1f:05:
         89:1b:dd:ba:16:58:1d:16:53:75:64:ef:2b:55:af:41:84:2a:
         0c:3d:0e:41:52:5c:8f:03:e1:b6:bd:c5:ad:11:a0:93:dc:de:
         8e:4b:e9:17:02:d9:3f:83:9b:4c:d7:b1:75:10:8c:ff:93:ca:
         4c:40:bb:38:80:4c:83:64:f2:10:f1:04:5e:7b:45:40:04:6e:
         64:76:a0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:47:c8:ca:0d:d0:ba:cc:83:24:aa:c4:09:b2:53:44:d2:da:f7:4b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:40:ac:b5:f3:c7:b0:dc:ca:07:85:b4:fa:5f:
                    0d:28:a4:0d:88:12:cb:05:a3:4f:bb:7d:01:88:de:
                    0c:b3:b9:0c:cc:3f:b4:6e:9f:d6:b6:a7:2a:6b:03:
                    c5:bc:3b:10:17:69:fd:29:5c:d3:fd:38:fe:b6:5e:
                    b2:04:8f:10:93:92:aa:db:76:07:a2:60:0f:3e:07:
                    bb:8d:f1:ca:c8:f3:38:69:61:38:41:4e:69:2d:70:
                    c2:ed:af:85:81:99:dc:8e:65:03:45:32:9b:01:95:
                    7c:d5:c0:90:bd:f4:08:a5:44:4b:e5:a2:e7:fe:17:
                    e4:f3:3d:59:35:8e:6d:3b:70:4d:b8:49:ac:63:ff:
                    3e:d4:71:36:e9:2b:50:c9:5c:bc:bb:b0:c6:1b:c4:
                    0a:01:ec:ae:3f:b7:bd:10:57:08:5e:ec:8a:07:ce:
                    e5:da:46:25:e8:ca:0a:e0:c2:cc:0d:44:84:db:0c:
                    88:d5:0f:65:bc:ea:69:10:ba:dc:93:ef:34:f9:2f:
                    c7:9b:c5:49:27:72:9c:a3:fd:40:9c:49:e3:59:7c:
                    24:cc:99:9a:01:b6:0d:fb:41:cb:36:80:41:88:c7:
                    75:9f:d5:01:6f:63:d5:f5:75:85:cd:26:3e:a6:fe:
                    8d:a9:ef:a8:b0:04:8b:7e:89:f3:5f:75:3a:56:69:
                    c7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3F:EE:51:69:3A:24:09:D6:26:3C:A4:08:22:1F:0D:77:7D:D5:E7:3B
            X509v3 Authority Key Identifier: 
                keyid:64:6F:C2:6E:64:18:20:24:F6:02:A9:AF:63:23:01:ED:CC:69:9B:E0

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         52:46:11:42:85:ea:0e:46:d3:2a:4b:17:f8:73:c9:7b:c8:93:
         dd:7b:ef:d1:34:aa:c3:77:d7:12:65:f5:e4:c0:e1:0e:57:55:
         5a:d6:c0:b1:85:61:c0:3c:dc:77:93:24:f0:81:88:43:75:12:
         80:0d:b0:b7:17:69:0e:24:53:25:50:76:5d:2e:32:46:7f:8d:
         00:7f:f6:06:d1:47:cf:95:af:54:67:d2:19:ef:b0:c7:5e:39:
         a2:4b:c7:b0:f3:f6:58:b3:50:fb:6a:e0:6d:df:52:46:77:cb:
         c0:bd:9e:db:ca:b0:a7:9c:92:76:ad:19:54:74:3e:52:0f:bf:
         8e:73:eb:7f:e8:1f:34:48:a0:4a:92:a6:c3:f7:6e:d1:64:07:
         c2:fe:5e:ae:1b:d9:08:1b:75:2e:80:4a:51:49:dd:ec:ca:70:
         72:d6:3c:94:04:39:84:61:c5:de:e9:c6:4c:f4:ad:b2:b3:0e:
         01:63:fd:9c:e9:16:4c:fd:7c:82:11:a2:e5:a8:1e:c3:91:b0:
         84:1a:36:18:55:06:18:9f:65:59:71:5f:96:6f:60:c9:4d:0e:
         92:64:ce:1e:20:77:57:35:67:77:dd:7a:b2:e0:b7:c0:37:8d:
         51:89:71:55:f7:a1:c0:4e:7f:91:80:44:32:86:ca:b3:24:7c:
         31:e2:ac:70
-----BEGIN CERTIFICATE-----
MIIDgDCCAmigAwIBAgIUPkfIyg3QusyDJKrECbJTRNLa90swDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw
MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAORArLXzx7DcygeFtPpfDSikDYgSywWjT7t9AYjeDLO5DMw/
tG6f1ranKmsDxbw7EBdp/Slc0/04/rZesgSPEJOSqtt2B6JgDz4Hu43xysjzOGlh
OEFOaS1wwu2vhYGZ3I5lA0UymwGVfNXAkL30CKVES+Wi5/4X5PM9WTWObTtwTbhJ
rGP/PtRxNukrUMlcvLuwxhvECgHsrj+3vRBXCF7sigfO5dpGJejKCuDCzA1EhNsM
iNUPZbzqaRC63JPvNPkvx5vFSSdynKP9QJxJ41l8JMyZmgG2DftByzaAQYjHdZ/V
AW9j1fV1hc0mPqb+janvqLAEi36J8191OlZpxwcCAwEAAaOByzCByDAdBgNVHQ4E
FgQUP+5RaTokCdYmPKQIIh8Nd33V5zswHwYDVR0jBBgwFoAUZG/CbmQYICT2Aqmv
YyMB7cxpm+AwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs
LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m
b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/
MA0GCSqGSIb3DQEBCwUAA4IBAQBSRhFCheoORtMqSxf4c8l7yJPde+/RNKrDd9cS
ZfXkwOEOV1Va1sCxhWHAPNx3kyTwgYhDdRKADbC3F2kOJFMlUHZdLjJGf40Af/YG
0UfPla9UZ9IZ77DHXjmiS8ew8/ZYs1D7auBt31JGd8vAvZ7byrCnnJJ2rRlUdD5S
D7+Oc+t/6B80SKBKkqbD927RZAfC/l6uG9kIG3UugEpRSd3synBy1jyUBDmEYcXe
6cZM9K2ysw4BY/2c6RZM/XyCEaLlqB7DkbCEGjYYVQYYn2VZcV+Wb2DJTQ6SZM4e
IHdXNWd33Xqy4LfAN41RiXFV96HATn+RgEQyhsqzJHwx4qxw
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:63:f9:27:23:34:d5:b4:a6:e3:b2:e1:3f:8c:39:ed:fb:cd:58:fc
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BogusRoot
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=BogusRoot
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:2f:dc:30:b5:3e:65:02:31:fe:76:d5:cf:
                    18:49:18:9a:99:63:02:ea:1f:9c:fc:34:05:04:f5:
                    dc:94:15:48:0c:0b:c0:18:b9:0f:a5:a0:8f:66:27:
                    02:0b:a9:33:0f:a8:27:d7:61:d7:77:7e:d5:ab:db:
                    d4:a0:32:d0:40:9b:66:91:5b:ec:07:df:67:13:14:
                    71:1f:21:98:d8:89:ae:15:dd:68:07:3d:3b:62:5c:
                    34:f8:e8:39:da:2a:23:01:6a:09:a7:91:a1:c1:94:
                    ab:ba:42:7f:24:20:57:c8:67:2a:d6:cf:24:7b:b6:
                    14:ad:69:61:c5:50:6b:6b:d2:77:0c:0c:6e:30:df:
                    2b:e8:c4:de:89:a9:94:bf:8d:70:4e:ee:e1:5d:0f:
                    11:0f:80:71:3d:67:90:59:c5:c7:d6:8b:6a:29:7d:
                    8a:43:7a:98:0d:75:83:db:3c:09:27:19:12:77:99:
                    2c:2b:a2:94:dc:7d:78:41:e2:4a:9a:31:f4:fa:8b:
                    ef:d3:d3:42:dd:1d:a5:be:5d:2f:1c:9c:33:4f:7d:
                    c8:bd:12:eb:18:cd:e0:80:d5:7a:1a:2d:93:fc:1f:
                    59:8e:72:f8:e5:21:e1:f2:fe:b7:6a:c1:e1:39:20:
                    26:60:98:fd:02:f0:5b:a2:6d:13:c7:15:20:9b:ef:
                    d5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6F:BD:F8:37:8B:1D:B5:1A:91:4C:D6:08:E8:33:85:8C:08:E9:3E:63
            X509v3 Authority Key Identifier: 
                keyid:6F:BD:F8:37:8B:1D:B5:1A:91:4C:D6:08:E8:33:85:8C:08:E9:3E:63

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/BogusRoot.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/BogusRoot.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         24:98:cc:7e:a5:c1:32:61:f4:c3:e0:ab:4f:ce:e5:dd:13:e1:
         1c:02:d8:fe:b5:47:5d:db:fe:75:36:35:2a:bf:23:6a:8b:16:
         09:5b:db:32:28:ea:3d:77:b9:75:d2:bc:b7:27:ae:7e:be:42:
         88:1a:8f:24:ab:2a:9b:21:69:fb:39:30:1f:6f:67:7a:c9:e1:
         fc:fb:63:83:ce:a6:d5:e2:6f:46:a4:de:c5:2c:cf:71:e9:b7:
         22:70:d3:0e:36:0c:38:f3:91:15:25:6f:27:61:0a:02:e3:06:
         c8:9b:56:00:aa:19:fe:99:d5:21:d1:b2:1d:70:87:84:cd:dc:
         1b:22:4a:a3:9b:61:65:b8:f8:36:f0:46:22:6a:05:23:fc:cc:
         d9:3a:83:8f:e9:dc:f9:fe:71:b7:fa:f0:db:32:a3:46:87:90:
         1c:c5:9b:3f:23:24:78:6c:cf:38:ef:64:43:58:99:4c:9f:c2:
         e3:fa:b2:93:7d:90:a7:3d:e3:64:99:e1:df:2c:12:f2:93:f6:
         2a:a5:e5:b4:98:b5:2d:ac:c5:87:a4:c2:a4:aa:e4:1b:8b:0a:
         f4:95:91:f5:b9:e8:82:95:e2:05:3b:19:5f:c7:90:f6:51:e9:
         12:bb:81:c0:33:c0:4c:8f:16:6c:b1:ee:ad:a4:4b:e1:d7:de:
         69:99:65:ca
-----BEGIN CERTIFICATE-----
MIIDjDCCAnSgAwIBAgIUZmP5JyM01bSm47LhP4w57fvNWPwwDQYJKoZIhvcNAQEL
BQAwFDESMBAGA1UEAwwJQm9ndXNSb290MB4XDTIxMTAwNTEyMDAwMFoXDTIyMTAw
NTEyMDAwMFowFDESMBAGA1UEAwwJQm9ndXNSb290MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAuMgv3DC1PmUCMf521c8YSRiamWMC6h+c/DQFBPXclBVI
DAvAGLkPpaCPZicCC6kzD6gn12HXd37Vq9vUoDLQQJtmkVvsB99nExRxHyGY2Imu
Fd1oBz07Ylw0+Og52iojAWoJp5GhwZSrukJ/JCBXyGcq1s8ke7YUrWlhxVBra9J3
DAxuMN8r6MTeiamUv41wTu7hXQ8RD4BxPWeQWcXH1otqKX2KQ3qYDXWD2zwJJxkS
d5ksK6KU3H14QeJKmjH0+ovv09NC3R2lvl0vHJwzT33IvRLrGM3ggNV6Gi2T/B9Z
jnL45SHh8v63asHhOSAmYJj9AvBbom0TxxUgm+/VMQIDAQABo4HVMIHSMB0GA1Ud
DgQWBBRvvfg3ix21GpFM1gjoM4WMCOk+YzAfBgNVHSMEGDAWgBRvvfg3ix21GpFM
1gjoM4WMCOk+YzA8BggrBgEFBQcBAQQwMC4wLAYIKwYBBQUHMAKGIGh0dHA6Ly91
cmwtZm9yLWFpYS9Cb2d1c1Jvb3QuY2VyMDEGA1UdHwQqMCgwJqAkoCKGIGh0dHA6
Ly91cmwtZm9yLWNybC9Cb2d1c1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNV
HRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAkmMx+pcEyYfTD4KtPzuXd
E+EcAtj+tUdd2/51NjUqvyNqixYJW9syKOo9d7l10ry3J65+vkKIGo8kqyqbIWn7
OTAfb2d6yeH8+2ODzqbV4m9GpN7FLM9x6bcicNMONgw485EVJW8nYQoC4wbIm1YA
qhn+mdUh0bIdcIeEzdwbIkqjm2FluPg28EYiagUj/MzZOoOP6dz5/nG3+vDbMqNG
h5AcxZs/IyR4bM8472RDWJlMn8Lj+rKTfZCnPeNkmeHfLBLyk/YqpeW0mLUtrMWH
pMKkquQbiwr0lZH1ueiCleIFOxlfx5D2UekSu4HAM8BMjxZsse6tpEvh195pmWXK
-----END CERTIFICATE-----