[Created by: generate-chains.py]

Certificate chain where the leaf has a basic constraints extension with
CA=false, however specifies the optional pathlen.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:58:fd:1c:9f:8b:f0:cb:61:00:36:cc:88:b7:31:82:91:15:f5:15
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:5c:f0:d7:23:f0:69:d9:b7:8f:fc:c3:d4:
                    47:a2:41:29:77:01:50:3c:84:8f:52:f7:11:6d:c4:
                    75:04:84:48:98:8c:4e:bb:f6:4b:e2:cb:4d:be:01:
                    dc:b2:8e:48:b6:da:76:4d:b0:28:75:94:28:d7:44:
                    2c:0d:a5:70:fe:b8:ec:c3:d0:0d:8b:74:4a:18:b9:
                    13:bb:b1:99:80:09:d0:bd:00:a3:20:64:70:bb:18:
                    00:7c:61:1f:5d:d2:dc:23:6a:6a:e3:8a:6c:13:9b:
                    a3:c5:7b:dc:91:71:29:46:4e:1c:8e:82:2a:d6:bb:
                    f9:5a:91:be:f0:a7:a9:b2:d5:8c:df:a2:d2:eb:3a:
                    e4:49:30:8b:83:20:6d:fb:af:90:19:3e:44:b5:d3:
                    bb:05:a1:15:a1:0d:4c:61:82:63:5e:24:a5:94:df:
                    a9:35:5a:0f:56:eb:8c:1d:a5:0e:80:4a:16:d1:ef:
                    dd:cf:84:f6:45:55:65:55:b8:73:ae:ca:1c:f8:c7:
                    e2:67:e8:8a:42:5e:eb:f6:2c:bf:55:1c:18:39:51:
                    5b:15:16:1b:0a:06:ba:b0:ad:bc:45:2d:23:5c:3a:
                    ca:2b:04:c9:a2:4f:a6:80:ec:d2:b8:d7:98:44:69:
                    3c:3c:2e:ab:b4:44:e2:50:6a:b8:a6:59:db:d4:61:
                    54:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5B:3D:C4:92:95:A9:93:D8:29:1F:56:EB:DA:A0:3C:1A:C0:BD:5D:AB
            X509v3 Authority Key Identifier: 
                keyid:FB:3A:43:9C:BA:40:89:72:5B:BD:26:8A:3B:25:77:1C:C1:F0:2C:7E

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE, pathlen:1
    Signature Algorithm: sha256WithRSAEncryption
         18:c7:ef:53:96:6c:fc:7d:06:87:5a:b7:cc:77:67:82:54:10:
         eb:8e:21:a6:57:f3:83:cf:ee:ba:c0:59:cc:95:d3:1b:2a:92:
         19:86:20:ee:7a:62:5c:cb:27:b9:71:22:a8:bb:f2:26:f6:15:
         a7:5a:57:79:d1:d0:4a:06:17:4f:95:f9:37:ab:13:6e:dd:57:
         3c:87:5e:dd:69:be:53:3a:51:3e:fc:7c:38:75:e3:20:cd:34:
         0f:23:d1:35:c2:00:03:9e:64:51:00:1d:e1:56:04:9a:6c:73:
         bd:fb:e3:f0:63:f3:11:04:59:83:42:19:7e:1d:a5:25:25:e0:
         12:9c:60:87:07:6d:a7:99:3d:24:1f:dd:a6:c7:f7:dd:34:d9:
         be:96:9c:e7:5a:21:f8:6b:8e:1b:77:7c:d8:04:6d:e4:7c:7a:
         fd:ba:44:4a:13:1d:8c:c0:64:59:de:95:5d:50:3c:13:9d:26:
         ee:36:08:d0:d0:fc:79:72:e1:af:d1:71:9c:7b:16:14:4b:2d:
         eb:e7:c2:6d:0a:cd:cd:ff:02:95:ff:60:af:32:42:58:69:8f:
         08:b1:a3:d6:37:80:6f:ce:93:83:c9:c5:52:8d:60:c3:6c:8c:
         62:20:7f:75:64:03:10:30:24:34:7b:20:b9:dc:21:83:fc:fa:
         b9:b5:11:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:eb:63:f0:f3:c9:2c:8c:45:ed:1d:f4:86:49:1e:61:f3:54:68:fe
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bb:78:97:4a:b5:56:42:fa:f9:6b:63:6c:f3:
                    0e:54:92:6c:84:d4:c7:53:48:24:c1:bd:6f:d0:83:
                    ad:f3:7a:5c:93:f1:74:38:ba:46:f1:19:db:0e:fb:
                    1b:b4:f2:9e:8b:c4:10:8e:97:b1:ff:f8:2d:03:cd:
                    36:91:8a:2c:e8:d8:da:a4:7e:58:8d:fb:ff:99:2b:
                    d5:e1:b3:63:7f:ec:2c:66:b5:0d:ca:ba:e1:74:5e:
                    b3:ad:bf:49:65:74:52:30:78:ed:ea:7c:08:26:32:
                    f1:d5:e3:ea:01:7e:3a:fc:0e:84:d6:17:aa:98:f8:
                    92:63:77:4d:5c:d3:13:61:af:e3:d8:35:0c:ff:1e:
                    39:91:0c:24:a9:ec:89:ab:28:97:97:56:eb:2a:73:
                    70:e7:46:17:89:1e:42:73:a5:f6:b6:de:5a:bc:24:
                    69:5d:41:09:31:f6:12:d3:57:2d:dc:96:9c:0a:4d:
                    64:f0:c4:24:44:8e:1d:66:37:a1:01:1a:d5:89:a8:
                    9c:81:82:00:d9:f5:56:e9:58:df:ea:5d:32:7e:fb:
                    2d:19:1b:39:b4:fb:77:2c:2e:e1:ae:f5:ea:b0:ad:
                    b7:d4:2e:35:86:26:9f:96:c6:e3:4c:27:7b:6a:7d:
                    a2:4e:bf:cb:59:33:85:6f:d1:98:e4:27:3c:95:3f:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FB:3A:43:9C:BA:40:89:72:5B:BD:26:8A:3B:25:77:1C:C1:F0:2C:7E
            X509v3 Authority Key Identifier: 
                keyid:8F:4E:5E:78:19:AE:28:82:69:2F:CF:33:95:04:C1:CD:75:D1:F6:FF

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         a9:df:02:10:a3:f8:14:af:a4:b2:3d:bf:3a:5e:e1:0f:9e:fa:
         e1:d0:5a:be:e8:a4:f4:db:b7:a6:1c:40:7a:06:0a:77:39:6f:
         f5:b9:7f:3b:5d:61:05:fc:0f:2e:de:40:89:2e:1b:11:12:35:
         96:44:a8:be:0b:35:f9:73:2f:81:bc:47:5c:01:b2:b8:22:7e:
         ca:c9:56:54:68:1a:4a:98:ac:6f:43:06:4b:a5:12:4f:05:ec:
         23:36:a5:5e:8e:a0:36:6b:35:12:e1:76:ad:84:77:af:eb:b6:
         b8:f6:4b:21:98:53:c2:32:74:03:ff:7f:67:bf:0d:31:58:6b:
         b5:bd:e7:c5:dc:e3:c4:04:1d:e0:c5:84:d9:6d:74:a3:21:66:
         5e:99:af:18:9e:db:49:8d:83:92:34:00:a2:e7:89:d2:4b:f5:
         6a:5e:02:a9:ab:3b:3d:23:01:34:c7:ee:99:3f:0e:75:55:ed:
         99:c1:28:b1:39:da:2e:25:03:59:82:ed:7a:e8:32:8a:9a:fc:
         fa:2a:e6:d1:13:0b:2b:9b:d7:a7:3e:23:e2:45:1a:a1:c1:e5:
         4d:fb:a5:3c:a0:5e:ef:c0:d4:9a:d6:53:e7:4a:48:6c:31:8a:
         92:60:7d:e8:d4:60:4a:6a:96:b0:f5:c2:a8:83:22:42:e0:1c:
         aa:15:1b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:eb:63:f0:f3:c9:2c:8c:45:ed:1d:f4:86:49:1e:61:f3:54:68:fd
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:c0:d6:b0:f3:cb:31:46:9d:ef:de:63:f3:
                    1a:24:10:36:fb:e8:ee:05:76:21:51:51:fd:52:47:
                    97:12:13:46:42:bc:94:37:5e:e6:41:d2:d8:75:27:
                    2c:3d:04:bc:e1:ac:bc:a8:f6:d8:74:63:9a:be:a9:
                    7b:d2:1b:96:87:25:3b:ce:d1:ff:b4:dd:fa:29:64:
                    ae:df:4c:1b:b4:fb:9e:8a:9a:6c:74:ba:2a:76:45:
                    03:b7:91:7e:90:ba:04:3d:dc:0a:17:77:b3:5f:dc:
                    56:07:eb:63:5e:2b:54:c9:d7:b3:4b:f3:42:6b:9e:
                    2a:80:9c:71:52:5d:0f:6d:97:c6:d3:f6:c4:7a:7a:
                    ee:ea:22:4f:1c:e8:42:55:6e:b2:2a:56:cf:86:3c:
                    94:d1:e7:e0:7c:78:8c:94:05:05:b0:3f:b2:70:18:
                    da:92:d2:9a:ba:57:7c:fb:52:4b:0f:34:cb:dc:ab:
                    40:a0:76:4e:cc:11:b9:57:be:f2:e2:fa:2b:ba:20:
                    b0:c8:ee:8d:0a:11:a2:02:d4:f7:38:3d:f4:a8:49:
                    f4:b4:8a:08:ff:d0:c3:25:21:0e:dc:f0:17:22:f2:
                    bf:07:3d:e7:5f:4c:b2:cd:1a:18:f1:fd:3a:5a:42:
                    79:b3:82:47:ad:ad:e0:02:7f:0b:19:34:5d:3b:90:
                    81:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8F:4E:5E:78:19:AE:28:82:69:2F:CF:33:95:04:C1:CD:75:D1:F6:FF
            X509v3 Authority Key Identifier: 
                keyid:8F:4E:5E:78:19:AE:28:82:69:2F:CF:33:95:04:C1:CD:75:D1:F6:FF

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         70:f6:5a:6d:fe:7b:04:4d:4f:e1:d2:c5:92:07:20:6d:68:d3:
         86:51:6c:60:3a:07:0a:1b:27:7d:99:88:db:01:a6:0e:f0:3a:
         3d:a2:37:0e:bd:32:48:e1:36:3c:ac:a3:89:2f:33:d0:ab:ba:
         7a:90:db:28:61:3d:7b:b5:4b:cd:df:3d:20:c6:a1:fb:81:ec:
         69:2a:f8:c3:4c:c6:48:87:39:34:84:3e:4d:2d:eb:c9:dd:26:
         70:8b:71:23:8c:0d:d1:fd:5b:0e:0e:58:86:20:0c:4e:aa:a1:
         d1:b0:e9:56:bf:9f:9a:4d:a8:0d:76:6a:48:a2:dd:19:92:25:
         93:7f:90:8f:a2:c0:ac:1d:d3:63:17:d6:a5:07:98:27:cb:a7:
         44:60:17:aa:f2:22:0f:0d:c9:7d:58:1c:00:54:e6:99:84:d3:
         a0:6e:e9:fb:8d:97:21:24:79:c4:b8:23:81:2c:65:da:cc:0e:
         09:9c:82:8a:23:74:54:10:56:e4:a2:f0:e8:ce:8f:d5:cf:03:
         d9:0e:37:f3:86:66:e0:4e:c0:55:fc:e1:1b:7b:cc:8a:ad:41:
         2f:7b:02:4a:42:f1:e4:b9:4e:86:f3:30:bb:8a:bf:f2:79:c7:
         5d:68:02:b5:fb:40:cf:3f:5d:55:55:58:05:ef:95:34:ee:ea:
         3e:6e:91:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----