[Created by: generate-chains.py]

Certificate chain where the intermediate has an unknown critical
extension.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:54:1e:c7:2c:6e:fe:21:b3:a1:00:b5:73:46:4d:6e:2f:ca:28:8a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:56:5a:78:c6:79:63:15:7a:a6:5b:ac:09:02:
                    26:d7:10:40:e3:ea:55:dc:1c:86:37:cd:9a:0c:7d:
                    6c:5a:1f:d0:58:25:72:48:c5:7f:ae:7c:eb:9c:a6:
                    e8:45:7c:f5:00:36:16:a9:00:f9:8e:8a:df:70:2c:
                    bb:30:6c:74:6a:c7:30:69:a5:2c:1d:77:3f:b0:fa:
                    89:e0:cb:07:39:ac:08:59:aa:4c:63:cc:62:fa:a9:
                    8c:19:27:61:2d:0d:97:98:ad:50:b8:b9:e2:5a:21:
                    c1:70:cd:e7:2a:ad:6a:68:1f:52:bc:8c:80:f5:51:
                    a6:f1:3f:47:c7:50:81:27:e5:15:37:48:4f:4b:c3:
                    1b:e9:01:b9:97:56:8b:b9:56:38:62:d0:c5:ca:52:
                    21:6b:2d:42:03:7a:d9:83:d3:cd:57:b4:8c:ca:a5:
                    91:bf:3f:e2:26:df:85:e6:6c:2c:80:56:26:21:95:
                    be:cf:a4:85:cf:5e:e4:18:05:e7:68:99:91:67:6d:
                    e3:16:92:c9:df:9f:89:3f:ae:ee:ee:a8:43:69:f6:
                    6b:92:5d:72:6b:bd:53:1c:4e:25:23:4f:ee:5a:ab:
                    3f:ba:01:42:94:02:db:cb:59:93:bb:b9:2a:ea:ad:
                    5a:17:26:84:67:99:05:98:f0:b1:3c:e0:a4:2b:17:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F7:35:7C:CD:CE:17:42:80:4E:A2:57:94:36:6B:2A:70:19:25:20:CD
            X509v3 Authority Key Identifier: 
                keyid:B7:0A:76:64:C2:EB:6F:75:8D:EE:42:82:82:B5:AE:9C:7B:B8:23:29

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         96:e4:7f:6d:16:9d:bf:f8:80:8c:21:b2:ff:75:e4:12:c4:f4:
         c0:c5:a1:0f:78:1f:b4:2f:87:51:6a:71:af:03:86:8a:6d:3b:
         9b:9d:42:e9:b5:96:07:5f:74:ef:ee:03:a7:2f:5c:95:00:9e:
         77:4e:72:af:0d:6f:72:d2:6a:32:4c:f1:ae:1e:49:94:d8:bf:
         53:81:83:45:17:ef:4d:89:55:33:7a:d9:a2:88:fa:a6:c9:10:
         9b:03:4c:88:d9:20:df:f4:39:9d:a5:57:c9:f5:1d:3a:bb:5b:
         82:30:7d:6b:f9:34:81:84:25:bb:d7:32:d3:b4:28:52:49:81:
         55:93:1e:39:ca:a6:3a:29:5c:98:2f:30:3e:0c:ad:07:fd:f9:
         ba:a1:e4:e8:26:c4:2b:f0:e3:87:46:8a:61:32:df:43:af:0d:
         bd:de:63:00:15:e2:57:c4:ba:cf:b0:d0:2b:f4:49:2d:2d:c3:
         e0:ff:90:e5:cf:a5:79:28:24:d8:7d:99:44:22:15:b8:b9:7c:
         bc:cf:ee:5a:c9:97:5c:df:f6:29:94:ff:a9:56:29:e2:1e:f6:
         e6:64:04:60:62:0f:8b:e6:02:34:44:11:a3:8a:fe:97:20:e8:
         e2:87:7f:3c:8a:e0:04:ea:83:e9:17:62:25:df:5a:98:af:a0:
         b0:34:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:03:de:56:53:4d:df:53:72:dc:6d:7a:68:da:5e:9a:7a:fb:e3:12
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:c1:dc:ae:32:12:ba:12:d0:12:d6:5e:18:
                    4a:ca:26:ef:e5:b8:b4:b0:9e:f0:6f:99:7d:d7:f5:
                    c5:2c:e3:3a:d0:61:35:51:a0:ea:eb:76:02:27:9a:
                    7e:19:b7:3f:9c:09:ee:e9:5d:60:64:82:19:94:74:
                    a2:b6:04:6b:ba:dd:51:c2:33:6c:9a:b9:eb:91:b9:
                    3a:07:6d:9e:36:3e:17:b7:38:27:1e:11:1e:06:35:
                    50:4c:02:11:48:17:28:87:14:0f:d7:28:65:4f:12:
                    80:da:4f:74:36:63:de:50:97:2e:68:dc:82:bb:f1:
                    c0:6a:60:34:1f:86:2d:61:13:0e:39:9e:14:d8:ba:
                    df:55:8d:bb:7b:38:77:85:d8:37:52:97:20:c2:12:
                    01:f0:e1:40:25:70:76:f4:89:5f:50:15:77:f9:74:
                    e9:53:e0:31:b8:e0:a7:f1:22:72:76:b1:07:13:b5:
                    e9:a8:f5:bf:29:0f:1f:95:bd:a1:79:74:56:7e:ba:
                    28:18:aa:20:8a:af:7b:ae:cc:cd:55:b2:8b:b4:f3:
                    5e:f2:bf:2e:09:9b:6a:b8:26:bf:79:58:c4:ca:2f:
                    fa:e0:28:7d:f7:85:71:c3:c2:03:b0:47:b9:11:d5:
                    4f:dc:5c:31:78:06:0b:06:09:bc:ae:95:0d:ee:71:
                    02:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B7:0A:76:64:C2:EB:6F:75:8D:EE:42:82:82:B5:AE:9C:7B:B8:23:29
            X509v3 Authority Key Identifier: 
                keyid:79:19:7C:D6:62:7D:B4:D8:E8:6E:7C:D3:E9:C7:2F:3D:F2:B2:40:A3

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            1.2.3.4: critical
                ....
    Signature Algorithm: sha256WithRSAEncryption
         c0:47:ef:0f:90:1e:fc:8a:d5:24:05:4c:bd:c2:13:ab:52:af:
         9a:19:2b:84:eb:61:a2:6f:72:06:55:b1:3a:c6:3a:f0:be:b9:
         8c:88:31:d1:89:3d:41:8c:4c:11:79:d2:26:dd:52:8a:f0:39:
         d5:4c:be:e4:ef:fa:2f:55:06:b9:a5:74:57:5e:e2:8d:07:ca:
         8b:24:4e:50:23:e4:e2:53:6f:8b:45:fa:b2:a8:c9:fa:cd:68:
         9e:8a:a8:8c:8b:99:a1:b3:f5:ab:77:b3:8b:d6:2f:e2:67:a5:
         c6:05:d7:f2:b5:d8:ed:e7:06:64:4c:73:fe:29:a9:7c:42:d8:
         32:64:45:90:ec:29:a4:9c:ab:5e:20:51:c2:e1:a6:c8:2a:43:
         1f:f1:2a:45:3b:91:be:69:5c:61:83:7f:81:2a:07:41:0c:aa:
         b1:bc:0e:43:99:e4:c1:c4:15:83:0f:09:02:11:31:70:f2:aa:
         62:35:45:3d:d4:45:56:c7:bf:9e:dd:63:41:3f:9c:ba:ec:3b:
         6e:8e:01:64:5a:09:a2:66:5f:fb:19:57:8d:32:4f:25:d7:04:
         73:60:25:35:22:84:11:b3:5b:a9:6c:25:59:c5:5b:c0:06:8d:
         36:9e:62:00:51:72:ff:23:28:cc:57:52:72:b0:cd:cc:0a:ed:
         22:7d:54:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:03:de:56:53:4d:df:53:72:dc:6d:7a:68:da:5e:9a:7a:fb:e3:11
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:26:50:c5:ac:e1:7e:b7:9d:20:24:3c:b5:
                    5d:00:3e:9e:20:03:93:41:ed:70:e7:cc:a7:8f:67:
                    48:1c:79:41:b4:e1:e3:7c:e6:35:31:74:43:61:cc:
                    7a:2d:15:b3:1c:fe:a1:75:1e:82:6e:39:30:10:39:
                    7c:c2:a3:84:ea:99:b6:9e:3f:ce:41:46:9f:43:03:
                    d0:8a:0a:b4:fb:e7:ec:05:b7:73:1f:c5:06:85:0d:
                    13:41:d5:f8:3b:b8:f0:65:2e:93:88:9f:c1:f8:81:
                    dc:c7:38:50:cb:fe:c6:cb:dd:6d:39:c4:4e:40:9a:
                    64:4f:a7:72:fc:98:cd:b9:4b:32:99:0e:0f:33:2e:
                    b6:2e:80:f2:e4:51:bb:14:e4:67:43:54:2f:a8:1e:
                    c3:4b:4f:4c:dd:4a:df:84:1e:e9:e7:50:bf:83:2e:
                    a6:38:a6:c9:d8:60:98:94:b6:5c:4b:1e:80:c4:39:
                    32:11:5e:ae:4d:c4:ac:10:be:cd:fe:a3:9c:38:2e:
                    55:be:0f:92:cb:06:87:d0:a3:d4:f8:a2:e7:ca:05:
                    c0:41:91:a4:b9:93:da:fd:38:3f:ce:c2:45:2b:06:
                    da:d4:91:53:e8:8e:c2:c3:39:c1:c6:dd:ff:41:fa:
                    94:66:c3:c9:ee:6a:e2:91:ac:ad:42:5e:7a:d4:8a:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                79:19:7C:D6:62:7D:B4:D8:E8:6E:7C:D3:E9:C7:2F:3D:F2:B2:40:A3
            X509v3 Authority Key Identifier: 
                keyid:79:19:7C:D6:62:7D:B4:D8:E8:6E:7C:D3:E9:C7:2F:3D:F2:B2:40:A3

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         62:07:27:bb:c4:53:8b:a0:70:79:a1:2b:e2:2b:bb:26:53:6d:
         ac:80:57:9f:71:54:d2:23:5f:74:b3:9a:4e:7e:7b:da:14:2f:
         27:d2:74:6c:d9:49:e2:30:60:55:97:cb:22:8c:75:49:fb:17:
         1d:8c:c5:f3:2a:0a:eb:e9:3d:7f:13:6f:83:9d:b0:5e:e1:71:
         1f:a3:c2:fd:66:09:3e:aa:82:cb:13:16:5f:05:79:9a:e9:2c:
         bd:f9:3d:76:c2:b3:e4:2b:05:3a:3c:e2:86:25:75:9c:d5:c0:
         fb:6c:65:7c:17:09:4d:ed:9f:04:72:3d:79:4e:e7:c1:1c:5d:
         85:cb:60:e0:e2:c1:4e:c6:6a:07:a7:0b:8d:4d:79:a5:32:84:
         9b:80:9e:93:8b:59:28:91:ed:fc:1a:6f:bf:37:55:8b:e6:9a:
         51:c2:c7:4d:b2:72:7f:ff:11:7b:53:f7:9d:05:66:27:2e:46:
         6b:dc:de:0a:c6:ce:82:7c:7d:85:d1:47:11:3b:e9:45:3d:4b:
         b2:6a:e2:b3:e0:8c:33:8a:6f:5e:94:11:b6:b6:aa:e2:f9:71:
         d9:ac:9d:94:c2:19:a0:de:0d:0d:09:16:fb:76:ee:9d:1b:52:
         61:bc:25:38:56:0d:03:59:ab:1f:39:da:40:df:d5:bf:44:c6:
         a2:93:24:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----