| [Created by: generate-chains.py] |
| |
| Certificate chain where the intermediate has an unknown critical |
| extension. |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 73:54:1e:c7:2c:6e:fe:21:b3:a1:00:b5:73:46:4d:6e:2f:ca:28:8a |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Intermediate |
| Validity |
| Not Before: Oct 5 12:00:00 2021 GMT |
| Not After : Oct 5 12:00:00 2022 GMT |
| Subject: CN=Target |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| RSA Public-Key: (2048 bit) |
| Modulus: |
| 00:e4:56:5a:78:c6:79:63:15:7a:a6:5b:ac:09:02: |
| 26:d7:10:40:e3:ea:55:dc:1c:86:37:cd:9a:0c:7d: |
| 6c:5a:1f:d0:58:25:72:48:c5:7f:ae:7c:eb:9c:a6: |
| e8:45:7c:f5:00:36:16:a9:00:f9:8e:8a:df:70:2c: |
| bb:30:6c:74:6a:c7:30:69:a5:2c:1d:77:3f:b0:fa: |
| 89:e0:cb:07:39:ac:08:59:aa:4c:63:cc:62:fa:a9: |
| 8c:19:27:61:2d:0d:97:98:ad:50:b8:b9:e2:5a:21: |
| c1:70:cd:e7:2a:ad:6a:68:1f:52:bc:8c:80:f5:51: |
| a6:f1:3f:47:c7:50:81:27:e5:15:37:48:4f:4b:c3: |
| 1b:e9:01:b9:97:56:8b:b9:56:38:62:d0:c5:ca:52: |
| 21:6b:2d:42:03:7a:d9:83:d3:cd:57:b4:8c:ca:a5: |
| 91:bf:3f:e2:26:df:85:e6:6c:2c:80:56:26:21:95: |
| be:cf:a4:85:cf:5e:e4:18:05:e7:68:99:91:67:6d: |
| e3:16:92:c9:df:9f:89:3f:ae:ee:ee:a8:43:69:f6: |
| 6b:92:5d:72:6b:bd:53:1c:4e:25:23:4f:ee:5a:ab: |
| 3f:ba:01:42:94:02:db:cb:59:93:bb:b9:2a:ea:ad: |
| 5a:17:26:84:67:99:05:98:f0:b1:3c:e0:a4:2b:17: |
| ea:19 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| F7:35:7C:CD:CE:17:42:80:4E:A2:57:94:36:6B:2A:70:19:25:20:CD |
| X509v3 Authority Key Identifier: |
| keyid:B7:0A:76:64:C2:EB:6F:75:8D:EE:42:82:82:B5:AE:9C:7B:B8:23:29 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Intermediate.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Intermediate.crl |
| |
| X509v3 Key Usage: critical |
| Digital Signature, Key Encipherment |
| X509v3 Extended Key Usage: |
| TLS Web Server Authentication, TLS Web Client Authentication |
| Signature Algorithm: sha256WithRSAEncryption |
| 96:e4:7f:6d:16:9d:bf:f8:80:8c:21:b2:ff:75:e4:12:c4:f4: |
| c0:c5:a1:0f:78:1f:b4:2f:87:51:6a:71:af:03:86:8a:6d:3b: |
| 9b:9d:42:e9:b5:96:07:5f:74:ef:ee:03:a7:2f:5c:95:00:9e: |
| 77:4e:72:af:0d:6f:72:d2:6a:32:4c:f1:ae:1e:49:94:d8:bf: |
| 53:81:83:45:17:ef:4d:89:55:33:7a:d9:a2:88:fa:a6:c9:10: |
| 9b:03:4c:88:d9:20:df:f4:39:9d:a5:57:c9:f5:1d:3a:bb:5b: |
| 82:30:7d:6b:f9:34:81:84:25:bb:d7:32:d3:b4:28:52:49:81: |
| 55:93:1e:39:ca:a6:3a:29:5c:98:2f:30:3e:0c:ad:07:fd:f9: |
| ba:a1:e4:e8:26:c4:2b:f0:e3:87:46:8a:61:32:df:43:af:0d: |
| bd:de:63:00:15:e2:57:c4:ba:cf:b0:d0:2b:f4:49:2d:2d:c3: |
| e0:ff:90:e5:cf:a5:79:28:24:d8:7d:99:44:22:15:b8:b9:7c: |
| bc:cf:ee:5a:c9:97:5c:df:f6:29:94:ff:a9:56:29:e2:1e:f6: |
| e6:64:04:60:62:0f:8b:e6:02:34:44:11:a3:8a:fe:97:20:e8: |
| e2:87:7f:3c:8a:e0:04:ea:83:e9:17:62:25:df:5a:98:af:a0: |
| b0:34:ae:db |
| -----BEGIN CERTIFICATE----- |
| MIIDoDCCAoigAwIBAgIUc1Qexyxu/iGzoQC1c0ZNbi/KKIowDQYJKoZIhvcNAQEL |
| BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTIxMTAwNTEyMDAwMFoXDTIy |
| MTAwNTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF |
| AAOCAQ8AMIIBCgKCAQEA5FZaeMZ5YxV6plusCQIm1xBA4+pV3ByGN82aDH1sWh/Q |
| WCVySMV/rnzrnKboRXz1ADYWqQD5jorfcCy7MGx0ascwaaUsHXc/sPqJ4MsHOawI |
| WapMY8xi+qmMGSdhLQ2XmK1QuLniWiHBcM3nKq1qaB9SvIyA9VGm8T9Hx1CBJ+UV |
| N0hPS8Mb6QG5l1aLuVY4YtDFylIhay1CA3rZg9PNV7SMyqWRvz/iJt+F5mwsgFYm |
| IZW+z6SFz17kGAXnaJmRZ23jFpLJ35+JP67u7qhDafZrkl1ya71THE4lI0/uWqs/ |
| ugFClALby1mTu7kq6q1aFyaEZ5kFmPCxPOCkKxfqGQIDAQABo4HpMIHmMB0GA1Ud |
| DgQWBBT3NXzNzhdCgE6iV5Q2aypwGSUgzTAfBgNVHSMEGDAWgBS3CnZkwutvdY3u |
| QoKCta6ce7gjKTA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91 |
| cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0 |
| dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIF |
| oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD |
| ggEBAJbkf20Wnb/4gIwhsv915BLE9MDFoQ94H7Qvh1Fqca8DhoptO5udQum1lgdf |
| dO/uA6cvXJUAnndOcq8Nb3LSajJM8a4eSZTYv1OBg0UX702JVTN62aKI+qbJEJsD |
| TIjZIN/0OZ2lV8n1HTq7W4IwfWv5NIGEJbvXMtO0KFJJgVWTHjnKpjopXJgvMD4M |
| rQf9+bqh5OgmxCvw44dGimEy30OvDb3eYwAV4lfEus+w0Cv0SS0tw+D/kOXPpXko |
| JNh9mUQiFbi5fLzP7lrJl1zf9imU/6lWKeIe9uZkBGBiD4vmAjREEaOK/pcg6OKH |
| fzyK4ATqg+kXYiXfWpivoLA0rts= |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 42:03:de:56:53:4d:df:53:72:dc:6d:7a:68:da:5e:9a:7a:fb:e3:12 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Oct 5 12:00:00 2021 GMT |
| Not After : Oct 5 12:00:00 2022 GMT |
| Subject: CN=Intermediate |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| RSA Public-Key: (2048 bit) |
| Modulus: |
| 00:af:53:c1:dc:ae:32:12:ba:12:d0:12:d6:5e:18: |
| 4a:ca:26:ef:e5:b8:b4:b0:9e:f0:6f:99:7d:d7:f5: |
| c5:2c:e3:3a:d0:61:35:51:a0:ea:eb:76:02:27:9a: |
| 7e:19:b7:3f:9c:09:ee:e9:5d:60:64:82:19:94:74: |
| a2:b6:04:6b:ba:dd:51:c2:33:6c:9a:b9:eb:91:b9: |
| 3a:07:6d:9e:36:3e:17:b7:38:27:1e:11:1e:06:35: |
| 50:4c:02:11:48:17:28:87:14:0f:d7:28:65:4f:12: |
| 80:da:4f:74:36:63:de:50:97:2e:68:dc:82:bb:f1: |
| c0:6a:60:34:1f:86:2d:61:13:0e:39:9e:14:d8:ba: |
| df:55:8d:bb:7b:38:77:85:d8:37:52:97:20:c2:12: |
| 01:f0:e1:40:25:70:76:f4:89:5f:50:15:77:f9:74: |
| e9:53:e0:31:b8:e0:a7:f1:22:72:76:b1:07:13:b5: |
| e9:a8:f5:bf:29:0f:1f:95:bd:a1:79:74:56:7e:ba: |
| 28:18:aa:20:8a:af:7b:ae:cc:cd:55:b2:8b:b4:f3: |
| 5e:f2:bf:2e:09:9b:6a:b8:26:bf:79:58:c4:ca:2f: |
| fa:e0:28:7d:f7:85:71:c3:c2:03:b0:47:b9:11:d5: |
| 4f:dc:5c:31:78:06:0b:06:09:bc:ae:95:0d:ee:71: |
| 02:23 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| B7:0A:76:64:C2:EB:6F:75:8D:EE:42:82:82:B5:AE:9C:7B:B8:23:29 |
| X509v3 Authority Key Identifier: |
| keyid:79:19:7C:D6:62:7D:B4:D8:E8:6E:7C:D3:E9:C7:2F:3D:F2:B2:40:A3 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| 1.2.3.4: critical |
| .... |
| Signature Algorithm: sha256WithRSAEncryption |
| c0:47:ef:0f:90:1e:fc:8a:d5:24:05:4c:bd:c2:13:ab:52:af: |
| 9a:19:2b:84:eb:61:a2:6f:72:06:55:b1:3a:c6:3a:f0:be:b9: |
| 8c:88:31:d1:89:3d:41:8c:4c:11:79:d2:26:dd:52:8a:f0:39: |
| d5:4c:be:e4:ef:fa:2f:55:06:b9:a5:74:57:5e:e2:8d:07:ca: |
| 8b:24:4e:50:23:e4:e2:53:6f:8b:45:fa:b2:a8:c9:fa:cd:68: |
| 9e:8a:a8:8c:8b:99:a1:b3:f5:ab:77:b3:8b:d6:2f:e2:67:a5: |
| c6:05:d7:f2:b5:d8:ed:e7:06:64:4c:73:fe:29:a9:7c:42:d8: |
| 32:64:45:90:ec:29:a4:9c:ab:5e:20:51:c2:e1:a6:c8:2a:43: |
| 1f:f1:2a:45:3b:91:be:69:5c:61:83:7f:81:2a:07:41:0c:aa: |
| b1:bc:0e:43:99:e4:c1:c4:15:83:0f:09:02:11:31:70:f2:aa: |
| 62:35:45:3d:d4:45:56:c7:bf:9e:dd:63:41:3f:9c:ba:ec:3b: |
| 6e:8e:01:64:5a:09:a2:66:5f:fb:19:57:8d:32:4f:25:d7:04: |
| 73:60:25:35:22:84:11:b3:5b:a9:6c:25:59:c5:5b:c0:06:8d: |
| 36:9e:62:00:51:72:ff:23:28:cc:57:52:72:b0:cd:cc:0a:ed: |
| 22:7d:54:6b |
| -----BEGIN CERTIFICATE----- |
| MIIDkDCCAnigAwIBAgIUQgPeVlNN31Ny3G16aNpemnr74xIwDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw |
| MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD |
| ggEPADCCAQoCggEBAK9TwdyuMhK6EtAS1l4YSsom7+W4tLCe8G+Zfdf1xSzjOtBh |
| NVGg6ut2Aieafhm3P5wJ7uldYGSCGZR0orYEa7rdUcIzbJq565G5OgdtnjY+F7c4 |
| Jx4RHgY1UEwCEUgXKIcUD9coZU8SgNpPdDZj3lCXLmjcgrvxwGpgNB+GLWETDjme |
| FNi631WNu3s4d4XYN1KXIMISAfDhQCVwdvSJX1AVd/l06VPgMbjgp/EicnaxBxO1 |
| 6aj1vykPH5W9oXl0Vn66KBiqIIqve67MzVWyi7TzXvK/Lgmbargmv3lYxMov+uAo |
| ffeFccPCA7BHuRHVT9xcMXgGCwYJvK6VDe5xAiMCAwEAAaOB2zCB2DAdBgNVHQ4E |
| FgQUtwp2ZMLrb3WN7kKCgrWunHu4IykwHwYDVR0jBBgwFoAUeRl81mJ9tNjobnzT |
| 6ccvPfKyQKMwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs |
| LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m |
| b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/ |
| MA4GAyoDBAEB/wQEAQIDBDANBgkqhkiG9w0BAQsFAAOCAQEAwEfvD5Ae/IrVJAVM |
| vcITq1KvmhkrhOthom9yBlWxOsY68L65jIgx0Yk9QYxMEXnSJt1SivA51Uy+5O/6 |
| L1UGuaV0V17ijQfKiyROUCPk4lNvi0X6sqjJ+s1onoqojIuZobP1q3ezi9Yv4mel |
| xgXX8rXY7ecGZExz/impfELYMmRFkOwppJyrXiBRwuGmyCpDH/EqRTuRvmlcYYN/ |
| gSoHQQyqsbwOQ5nkwcQVgw8JAhExcPKqYjVFPdRFVse/nt1jQT+cuuw7bo4BZFoJ |
| omZf+xlXjTJPJdcEc2AlNSKEEbNbqWwlWcVbwAaNNp5iAFFy/yMozFdScrDNzArt |
| In1Uaw== |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 42:03:de:56:53:4d:df:53:72:dc:6d:7a:68:da:5e:9a:7a:fb:e3:11 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Oct 5 12:00:00 2021 GMT |
| Not After : Oct 5 12:00:00 2022 GMT |
| Subject: CN=Root |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| RSA Public-Key: (2048 bit) |
| Modulus: |
| 00:d4:ae:26:50:c5:ac:e1:7e:b7:9d:20:24:3c:b5: |
| 5d:00:3e:9e:20:03:93:41:ed:70:e7:cc:a7:8f:67: |
| 48:1c:79:41:b4:e1:e3:7c:e6:35:31:74:43:61:cc: |
| 7a:2d:15:b3:1c:fe:a1:75:1e:82:6e:39:30:10:39: |
| 7c:c2:a3:84:ea:99:b6:9e:3f:ce:41:46:9f:43:03: |
| d0:8a:0a:b4:fb:e7:ec:05:b7:73:1f:c5:06:85:0d: |
| 13:41:d5:f8:3b:b8:f0:65:2e:93:88:9f:c1:f8:81: |
| dc:c7:38:50:cb:fe:c6:cb:dd:6d:39:c4:4e:40:9a: |
| 64:4f:a7:72:fc:98:cd:b9:4b:32:99:0e:0f:33:2e: |
| b6:2e:80:f2:e4:51:bb:14:e4:67:43:54:2f:a8:1e: |
| c3:4b:4f:4c:dd:4a:df:84:1e:e9:e7:50:bf:83:2e: |
| a6:38:a6:c9:d8:60:98:94:b6:5c:4b:1e:80:c4:39: |
| 32:11:5e:ae:4d:c4:ac:10:be:cd:fe:a3:9c:38:2e: |
| 55:be:0f:92:cb:06:87:d0:a3:d4:f8:a2:e7:ca:05: |
| c0:41:91:a4:b9:93:da:fd:38:3f:ce:c2:45:2b:06: |
| da:d4:91:53:e8:8e:c2:c3:39:c1:c6:dd:ff:41:fa: |
| 94:66:c3:c9:ee:6a:e2:91:ac:ad:42:5e:7a:d4:8a: |
| 43:9f |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 79:19:7C:D6:62:7D:B4:D8:E8:6E:7C:D3:E9:C7:2F:3D:F2:B2:40:A3 |
| X509v3 Authority Key Identifier: |
| keyid:79:19:7C:D6:62:7D:B4:D8:E8:6E:7C:D3:E9:C7:2F:3D:F2:B2:40:A3 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 62:07:27:bb:c4:53:8b:a0:70:79:a1:2b:e2:2b:bb:26:53:6d: |
| ac:80:57:9f:71:54:d2:23:5f:74:b3:9a:4e:7e:7b:da:14:2f: |
| 27:d2:74:6c:d9:49:e2:30:60:55:97:cb:22:8c:75:49:fb:17: |
| 1d:8c:c5:f3:2a:0a:eb:e9:3d:7f:13:6f:83:9d:b0:5e:e1:71: |
| 1f:a3:c2:fd:66:09:3e:aa:82:cb:13:16:5f:05:79:9a:e9:2c: |
| bd:f9:3d:76:c2:b3:e4:2b:05:3a:3c:e2:86:25:75:9c:d5:c0: |
| fb:6c:65:7c:17:09:4d:ed:9f:04:72:3d:79:4e:e7:c1:1c:5d: |
| 85:cb:60:e0:e2:c1:4e:c6:6a:07:a7:0b:8d:4d:79:a5:32:84: |
| 9b:80:9e:93:8b:59:28:91:ed:fc:1a:6f:bf:37:55:8b:e6:9a: |
| 51:c2:c7:4d:b2:72:7f:ff:11:7b:53:f7:9d:05:66:27:2e:46: |
| 6b:dc:de:0a:c6:ce:82:7c:7d:85:d1:47:11:3b:e9:45:3d:4b: |
| b2:6a:e2:b3:e0:8c:33:8a:6f:5e:94:11:b6:b6:aa:e2:f9:71: |
| d9:ac:9d:94:c2:19:a0:de:0d:0d:09:16:fb:76:ee:9d:1b:52: |
| 61:bc:25:38:56:0d:03:59:ab:1f:39:da:40:df:d5:bf:44:c6: |
| a2:93:24:bb |
| -----BEGIN CERTIFICATE----- |
| MIIDeDCCAmCgAwIBAgIUQgPeVlNN31Ny3G16aNpemnr74xEwDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw |
| MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK |
| AoIBAQDUriZQxazhfredICQ8tV0APp4gA5NB7XDnzKePZ0gceUG04eN85jUxdENh |
| zHotFbMc/qF1HoJuOTAQOXzCo4TqmbaeP85BRp9DA9CKCrT75+wFt3MfxQaFDRNB |
| 1fg7uPBlLpOIn8H4gdzHOFDL/sbL3W05xE5AmmRPp3L8mM25SzKZDg8zLrYugPLk |
| UbsU5GdDVC+oHsNLT0zdSt+EHunnUL+DLqY4psnYYJiUtlxLHoDEOTIRXq5NxKwQ |
| vs3+o5w4LlW+D5LLBofQo9T4oufKBcBBkaS5k9r9OD/OwkUrBtrUkVPojsLDOcHG |
| 3f9B+pRmw8nuauKRrK1CXnrUikOfAgMBAAGjgcswgcgwHQYDVR0OBBYEFHkZfNZi |
| fbTY6G580+nHLz3yskCjMB8GA1UdIwQYMBaAFHkZfNZifbTY6G580+nHLz3yskCj |
| MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh |
| L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S |
| b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG |
| 9w0BAQsFAAOCAQEAYgcnu8RTi6BweaEr4iu7JlNtrIBXn3FU0iNfdLOaTn572hQv |
| J9J0bNlJ4jBgVZfLIox1SfsXHYzF8yoK6+k9fxNvg52wXuFxH6PC/WYJPqqCyxMW |
| XwV5muksvfk9dsKz5CsFOjzihiV1nNXA+2xlfBcJTe2fBHI9eU7nwRxdhctg4OLB |
| TsZqB6cLjU15pTKEm4Cek4tZKJHt/BpvvzdVi+aaUcLHTbJyf/8Re1P3nQVmJy5G |
| a9zeCsbOgnx9hdFHETvpRT1Lsmris+CMM4pvXpQRtraq4vlx2aydlMIZoN4NDQkW |
| +3bunRtSYbwlOFYNA1mrHznaQN/Vv0TGopMkuw== |
| -----END CERTIFICATE----- |
