[Created by: generate-chains.py]

Certificate chain where the target certificate is a CA rather than an
end-entity certificate (based on the basic constraints extension).

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a4:86:6a:41:8e:28:fd:af:66:05:2a:fc:73:db:94:88:ab:21:08
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:4e:2d:c7:c9:c2:ab:e9:b7:ff:2f:3a:09:
                    f2:64:ea:bc:ea:9c:34:fa:39:c1:2d:c2:38:c3:51:
                    ec:7b:06:6e:21:c6:7b:a0:04:ec:e3:dd:5a:72:0a:
                    0f:bc:73:37:7f:01:7e:02:3d:d5:cb:7a:2d:cc:b3:
                    c7:d9:cb:44:0e:d6:a3:1d:dc:69:08:80:50:ce:2b:
                    9b:a3:8d:3f:4e:79:55:ea:cc:94:81:7a:9d:fc:54:
                    f5:15:9e:17:99:e2:30:9b:67:55:4c:79:cc:85:13:
                    ca:38:af:ec:df:a5:50:bc:b8:ff:0a:4e:12:be:5e:
                    de:64:d3:ac:7d:f5:cc:3f:9a:b5:94:32:75:65:8e:
                    47:b0:81:d7:c8:27:5f:7c:44:31:53:6d:93:36:6f:
                    54:99:dc:82:24:7c:ab:14:eb:67:2f:3b:10:a4:cb:
                    56:34:05:f4:b1:fc:12:42:dd:3c:dc:16:0f:d1:8f:
                    f0:87:fa:07:b4:fa:3d:7a:47:c0:dc:95:09:77:9c:
                    28:b3:a3:ae:9e:72:d3:bc:3b:a5:57:f7:31:3b:4f:
                    76:30:a2:43:56:74:f9:3b:7b:f7:ec:43:64:3e:56:
                    aa:93:53:d4:4a:5a:84:8b:fb:68:43:17:a4:20:13:
                    07:e0:aa:7f:b1:c3:36:15:8b:b3:ec:e2:e6:d6:4a:
                    5f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                93:E1:6A:2B:C0:A8:CA:CA:A9:B3:28:0E:8B:11:FF:0B:B0:24:73:F6
            X509v3 Authority Key Identifier: 
                keyid:9A:2E:6F:0B:96:F4:DF:5E:32:32:96:E5:03:2A:FA:DD:98:12:55:EE

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         3b:1b:cf:43:25:88:9a:60:97:96:37:99:75:4d:6c:e6:51:fb:
         f7:4e:bc:90:c5:d4:3b:ce:62:22:11:26:fd:56:58:7c:7b:c4:
         b7:d4:50:ce:89:6d:4f:4d:7f:dc:42:e5:d4:78:aa:7b:0f:78:
         5c:9b:17:be:d5:6e:7c:8e:7a:29:eb:eb:19:64:98:b9:94:ea:
         fe:bc:1b:7a:52:b3:1b:c5:7f:b2:9b:1a:fc:f5:13:40:5b:14:
         3d:cb:c2:b5:e6:d9:5b:69:5f:66:09:9a:d2:68:8a:34:5b:3f:
         8b:d1:e9:dc:00:d1:fa:f2:0a:5a:71:c9:63:55:87:8a:f2:af:
         72:34:94:31:8f:06:5c:45:80:fa:e4:32:70:6d:8d:39:c8:2c:
         78:8e:10:c6:ef:a0:ec:c1:4f:ba:49:2f:9b:8c:43:e0:4c:47:
         7f:d5:c9:92:db:ac:36:9a:71:f4:aa:d6:7c:45:c1:a7:e9:3e:
         39:f1:e7:88:e0:ca:f5:93:d0:ba:c7:ab:36:09:5e:49:e7:8c:
         9a:aa:98:aa:86:47:77:87:1f:34:4f:f6:56:84:be:5e:e7:f4:
         6e:f7:23:d1:7c:3c:98:82:5c:89:b9:cc:ba:d4:f2:f9:4d:ec:
         3a:63:80:06:1a:a3:25:48:80:c6:22:dd:09:6c:c6:d2:20:68:
         49:23:f2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c3:39:90:77:32:c2:7e:ea:1a:68:8b:35:f3:20:6c:3d:1d:57:65
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:35:8b:85:75:a2:74:1e:b4:bd:5c:9b:e2:
                    7a:87:32:a1:df:63:d4:5c:10:c8:3c:c2:7e:aa:53:
                    09:d8:fa:ce:14:bd:80:a7:b3:cb:4b:84:af:fc:c8:
                    de:97:38:d8:17:cd:1d:6a:65:39:b5:27:36:bc:64:
                    9a:4f:2d:91:5f:34:2b:f2:83:fa:2b:ea:1c:6e:5f:
                    60:09:c3:70:94:0f:bd:0c:eb:e2:a0:ba:43:5a:3a:
                    dd:3e:02:99:52:4a:28:e2:e4:dc:18:95:3a:bd:44:
                    6f:c1:a2:3e:6f:43:57:60:a4:70:17:ae:42:d1:9c:
                    7c:08:7f:f0:77:93:78:59:b2:c4:39:db:28:cd:19:
                    42:78:c5:00:a2:3a:6f:ef:57:a7:22:d5:87:6a:26:
                    c4:d1:9f:18:70:05:43:9c:72:a1:03:79:47:ba:f5:
                    64:f9:0f:63:c1:fe:70:3f:f0:5c:92:44:e6:71:88:
                    0e:ec:13:0c:45:33:93:b8:3c:c2:fe:07:7d:0e:b2:
                    bb:2f:19:69:d0:d1:9c:77:77:48:54:ca:5d:0f:8e:
                    6d:8d:27:37:61:45:12:de:22:6c:da:2f:23:9f:d1:
                    0f:38:03:75:b4:53:ba:81:17:4a:83:93:19:4b:56:
                    4e:31:63:12:6f:89:5c:5c:7b:1b:49:fc:6a:a0:8a:
                    54:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9A:2E:6F:0B:96:F4:DF:5E:32:32:96:E5:03:2A:FA:DD:98:12:55:EE
            X509v3 Authority Key Identifier: 
                keyid:19:FB:52:2E:B1:D7:76:19:DB:8B:05:83:BE:62:CA:0B:48:6E:75:0E

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         44:62:37:44:99:36:0e:d9:27:a8:40:bb:43:49:e2:ff:17:8b:
         a8:0c:f8:ab:18:c3:f8:6f:07:bb:cd:e6:3b:33:05:2e:34:2d:
         b8:01:53:9c:88:27:b8:c0:74:d1:23:e3:36:1f:43:05:98:38:
         6c:26:94:67:62:73:77:73:d7:c0:b0:57:65:f2:cb:7d:03:ef:
         a0:46:0b:ff:52:f0:db:cf:f3:9d:d9:21:bf:f3:ae:59:d7:03:
         ce:e0:0c:34:ec:53:20:8b:be:16:55:a2:96:86:e6:2e:18:d2:
         4f:bd:49:71:aa:52:19:ce:a5:d7:01:28:53:2a:42:3d:e1:a2:
         22:84:72:86:f6:40:f5:3b:78:80:0e:c9:f4:70:30:00:31:ed:
         53:37:7e:9e:e0:fe:2d:6d:b4:6a:1c:10:d4:59:d8:e3:09:d5:
         62:8a:a3:37:06:74:51:18:f0:63:26:9b:2a:3f:8c:c3:2e:14:
         e7:71:69:2e:f3:d2:c9:39:cf:28:c7:16:be:68:b4:c5:25:da:
         15:f0:9d:05:9b:54:0d:61:d1:d1:d4:2e:8c:85:6b:c2:eb:9c:
         89:89:62:1b:e2:f7:96:f6:d7:8b:c0:0a:b7:51:3c:41:e1:f2:
         b7:46:30:92:e9:e3:4e:eb:66:a7:c0:47:44:bb:e8:62:42:8d:
         71:39:ab:1e
-----BEGIN CERTIFICATE-----
MIIDgDCCAmigAwIBAgIUHsM5kHcywn7qGmiLNfMgbD0dV2UwDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw
MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALKUNYuFdaJ0HrS9XJvieocyod9j1FwQyDzCfqpTCdj6zhS9
gKezy0uEr/zI3pc42BfNHWplObUnNrxkmk8tkV80K/KD+ivqHG5fYAnDcJQPvQzr
4qC6Q1o63T4CmVJKKOLk3BiVOr1Eb8GiPm9DV2CkcBeuQtGcfAh/8HeTeFmyxDnb
KM0ZQnjFAKI6b+9XpyLVh2omxNGfGHAFQ5xyoQN5R7r1ZPkPY8H+cD/wXJJE5nGI
DuwTDEUzk7g8wv4HfQ6yuy8ZadDRnHd3SFTKXQ+ObY0nN2FFEt4ibNovI5/RDzgD
dbRTuoEXSoOTGUtWTjFjEm+JXFx7G0n8aqCKVI0CAwEAAaOByzCByDAdBgNVHQ4E
FgQUmi5vC5b0314yMpblAyr63ZgSVe4wHwYDVR0jBBgwFoAUGftSLrHXdhnbiwWD
vmLKC0hudQ4wNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs
LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m
b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/
MA0GCSqGSIb3DQEBCwUAA4IBAQBEYjdEmTYO2SeoQLtDSeL/F4uoDPirGMP4bwe7
zeY7MwUuNC24AVOciCe4wHTRI+M2H0MFmDhsJpRnYnN3c9fAsFdl8st9A++gRgv/
UvDbz/Od2SG/865Z1wPO4Aw07FMgi74WVaKWhuYuGNJPvUlxqlIZzqXXAShTKkI9
4aIihHKG9kD1O3iADsn0cDAAMe1TN36e4P4tbbRqHBDUWdjjCdViiqM3BnRRGPBj
JpsqP4zDLhTncWku89LJOc8oxxa+aLTFJdoV8J0Fm1QNYdHR1C6MhWvC65yJiWIb
4veW9teLwAq3UTxB4fK3RjCS6eNO62anwEdEu+hiQo1xOase
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c3:39:90:77:32:c2:7e:ea:1a:68:8b:35:f3:20:6c:3d:1d:57:64
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:00:37:2d:30:07:b1:79:ce:1c:2f:e5:de:
                    14:66:f0:c4:c9:65:94:d5:d8:86:9b:f8:3e:fa:8f:
                    2a:f6:45:59:3f:2b:e2:ca:27:da:e1:63:8b:cd:3d:
                    9d:f7:9c:fd:a8:c0:34:87:d3:7a:ff:50:a2:43:8c:
                    96:db:d7:a9:43:bd:e9:f9:ac:f2:6c:85:e7:46:33:
                    4b:4b:32:2f:62:fb:86:5e:f7:70:74:24:b7:a7:9b:
                    f5:1c:ba:d2:06:93:d4:2c:7e:94:de:64:d4:df:a5:
                    d7:07:f0:57:32:76:e8:d8:dc:10:37:54:24:73:34:
                    1d:7f:fe:8a:5f:21:40:b4:cd:aa:ab:a6:ea:9b:f3:
                    6e:eb:45:0f:52:f2:0b:aa:5f:0c:bd:69:b4:bc:c5:
                    ba:eb:36:29:07:62:9c:f1:26:59:89:04:b7:87:c6:
                    5b:9e:e9:93:af:81:f2:29:21:8a:fc:99:93:2d:d9:
                    8a:0e:5a:43:b1:d8:31:42:e3:70:ab:5d:ed:7c:bc:
                    08:71:27:e9:8f:f2:ac:09:12:be:28:91:31:c7:89:
                    a4:e3:0a:07:e5:c0:f4:6c:fa:53:4f:1f:71:3a:42:
                    c7:b3:25:56:fc:69:ce:98:99:d6:fa:b4:e2:3d:c7:
                    4c:b8:f2:a9:c7:39:3e:dd:60:e6:06:dd:68:f9:ec:
                    55:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                19:FB:52:2E:B1:D7:76:19:DB:8B:05:83:BE:62:CA:0B:48:6E:75:0E
            X509v3 Authority Key Identifier: 
                keyid:19:FB:52:2E:B1:D7:76:19:DB:8B:05:83:BE:62:CA:0B:48:6E:75:0E

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         20:f5:24:c4:1a:b4:5e:99:ec:db:65:89:a5:41:d3:eb:0e:78:
         85:18:3a:db:c2:37:ca:c7:3c:d7:ba:ac:14:bf:ce:31:8c:fb:
         8b:8c:53:a1:bd:c6:1f:13:82:e3:90:0a:a8:9e:bb:58:00:8f:
         37:bb:04:59:60:87:56:04:3f:0b:0a:60:e0:57:54:29:81:b3:
         07:d1:05:01:b6:72:ba:28:55:c1:d1:62:af:9c:f8:c8:4b:fa:
         c4:6a:51:94:13:63:74:2a:61:9a:c9:f5:75:1b:3c:db:d4:0a:
         8b:cb:ef:f8:ae:9e:f5:ae:e3:9f:8e:94:54:08:80:45:f4:50:
         5a:41:cb:f2:ae:58:b3:cf:c0:97:16:af:19:7a:d6:17:39:8e:
         17:49:8b:a4:70:de:af:ee:80:01:dc:1f:29:52:70:16:9f:61:
         ef:1c:a4:44:90:17:9d:b3:b0:cc:c6:d5:cc:6a:14:d7:92:a3:
         e5:09:9f:96:23:c8:08:4c:09:4c:c1:a3:03:cf:b5:56:1a:49:
         12:52:f4:f7:a7:78:d4:f0:89:89:97:ff:52:21:0a:05:7a:6d:
         e8:4b:b6:8f:a5:4d:ed:a0:13:06:97:d0:75:5d:d4:00:d9:31:
         2a:3c:cd:45:e1:fc:0f:be:a5:58:a6:94:52:0c:96:95:39:4c:
         e7:64:73:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----