[Created by: generate-chains.py]

Certificate chain where the intermediate lacks a keyUsage extension.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ac:3f:b9:36:25:f6:73:c5:c7:47:1c:6a:5c:69:4c:10:a5:76:ee
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f3:c9:3b:b8:fb:d0:c6:d9:9d:7e:a6:0c:37:
                    fb:1e:e7:a9:ec:90:b1:a2:06:2a:b0:f1:d3:81:53:
                    8c:86:ea:c3:80:04:18:04:26:b0:70:4f:6b:7c:6b:
                    5f:31:b8:8d:e7:8a:93:a1:9d:69:20:a9:5e:0a:13:
                    a1:a1:c7:7b:e9:e4:bf:d1:67:50:e4:7a:e4:db:00:
                    a6:cb:f6:2c:a8:47:9d:7b:9a:6e:69:86:06:a2:0d:
                    ad:68:86:67:ff:da:0e:a1:ae:30:57:28:27:15:f3:
                    8b:b6:e2:3e:c8:30:26:6e:f4:05:ec:eb:b5:bc:cb:
                    37:bc:5d:db:c2:6a:f8:4f:e5:7f:b8:f2:62:aa:59:
                    3b:40:ce:40:67:7d:83:bb:66:20:a5:73:82:7e:40:
                    ce:87:ae:3d:36:dc:06:26:09:c9:3e:6b:13:ed:c8:
                    44:ee:cf:f3:db:38:a1:ee:cd:02:94:18:7f:c6:d7:
                    78:65:8d:34:bb:a3:d4:c5:27:e1:b9:b5:67:ad:fb:
                    3c:ce:9a:3d:f6:c7:54:2e:7b:fa:f8:89:e9:56:2b:
                    e9:78:2e:02:14:2b:1a:18:e4:ce:f7:80:67:f7:0f:
                    88:bc:78:70:8f:1c:d5:3f:22:3b:38:22:51:d8:fd:
                    6d:93:de:05:0c:1c:a8:b7:b1:d3:a9:83:6b:8b:10:
                    ad:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C5:A1:CF:17:29:4F:62:DA:B7:74:71:6F:6A:89:D9:DE:45:66:A7:E4
            X509v3 Authority Key Identifier: 
                keyid:4C:E2:EE:E5:DC:2B:D0:74:49:43:BA:6D:6B:91:6F:A3:C0:53:89:92

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         12:ce:55:2d:ae:64:c8:29:65:70:19:2f:02:a9:b1:b9:7a:b3:
         c5:cc:fe:b5:e0:50:58:a9:ec:d5:04:ef:b6:99:cc:57:e5:c5:
         6e:af:4d:9d:12:3d:ca:66:eb:bf:db:0a:e3:56:a8:0e:ea:8e:
         db:28:64:39:db:4f:06:f6:c6:45:de:92:fb:39:7d:98:1d:16:
         ba:3e:c9:f4:6c:3d:1f:c5:53:6e:01:65:65:ee:fd:55:f8:30:
         8e:f8:3b:42:d5:94:4c:63:74:9e:01:0e:c6:a6:ea:b6:20:07:
         81:6c:f4:52:0c:9c:8e:d8:7e:da:41:89:80:59:cc:09:06:30:
         a7:bb:16:4f:4f:c4:11:fc:31:58:5a:2b:84:37:36:b8:be:02:
         4b:db:93:5e:00:12:27:84:ef:1f:83:8f:26:63:7a:3b:f6:b2:
         2f:9c:17:e1:85:39:44:22:d0:e6:b5:ff:88:f3:1b:ea:64:31:
         a5:bc:79:66:cd:49:2b:b1:c3:aa:a2:f0:02:1f:68:23:3d:78:
         a3:e8:c7:3d:bb:0f:6a:1e:d3:a3:3a:56:51:61:ad:16:77:7e:
         5a:dc:28:7a:06:e5:79:72:31:3e:ad:56:16:5d:41:e5:0f:d8:
         0e:f1:79:01:d9:7e:a1:8e:0a:88:00:41:d4:0a:74:5e:17:a6:
         43:6f:14:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:25:c9:a3:e4:54:8c:35:15:0b:cc:cf:a5:a6:2b:fd:97:e9:d0:de
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:c0:66:3d:c7:72:ee:18:23:d7:56:80:3c:
                    b2:c2:57:81:a3:74:9c:05:07:e7:1a:70:ba:0c:08:
                    fc:14:db:52:16:03:2b:90:bb:01:1a:61:65:52:19:
                    8a:9b:08:2e:ed:00:29:31:a3:8a:7b:30:32:89:cb:
                    3d:4e:1e:a2:4c:f6:21:ff:5e:02:9c:7f:7a:e0:0d:
                    1c:cb:d7:e9:ee:9e:64:3f:b3:ca:17:79:c1:36:9d:
                    51:87:06:2d:c1:f4:28:f2:8b:49:a9:d2:12:89:b4:
                    60:60:65:00:6f:09:83:f8:95:94:ca:8c:70:2d:1d:
                    e0:7b:42:fc:53:4b:40:8c:d3:67:a1:2c:0a:c7:53:
                    8a:af:31:91:5b:12:cd:4b:d0:19:11:22:cc:82:94:
                    10:89:f0:b2:ae:f0:11:6e:91:bb:a5:77:89:c9:fd:
                    37:ea:b0:09:9a:7a:bf:7b:e9:d5:f5:56:13:af:b3:
                    d9:3f:c4:90:5a:b1:ed:ee:de:6f:86:16:61:f6:2d:
                    15:c9:6e:94:f2:72:58:e7:5e:ab:f1:2a:42:b1:6c:
                    c7:cd:fd:b1:2d:48:e0:b3:c4:09:e6:bd:e1:f9:3b:
                    1b:a5:5c:dc:0d:b9:40:2d:55:af:70:b2:01:cf:83:
                    35:85:4f:b4:a9:fc:33:f3:3c:f7:30:0c:c0:c5:22:
                    05:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4C:E2:EE:E5:DC:2B:D0:74:49:43:BA:6D:6B:91:6F:A3:C0:53:89:92
            X509v3 Authority Key Identifier: 
                keyid:CC:94:41:CF:A9:F7:C7:58:7C:37:E3:C5:37:29:9B:12:B3:DF:D5:3B

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         89:32:fa:0c:fa:ed:77:b4:36:bf:6a:e0:f8:e7:27:9c:45:e6:
         ce:7c:00:cb:85:92:e4:a6:8e:da:42:35:49:2f:25:f8:0b:1c:
         66:fa:1a:36:30:87:e8:1e:e1:eb:c1:72:27:0e:06:22:e6:9b:
         40:ed:12:72:b5:c6:1f:1c:87:40:58:8c:ee:d6:3b:f1:4c:9e:
         88:8e:88:45:5b:a8:e1:de:c9:5d:16:d2:56:9c:49:27:4e:07:
         a0:3a:f8:e9:ad:6f:78:8d:c2:ce:03:9f:49:50:be:1b:b6:a5:
         f9:88:49:73:b2:f5:82:c0:e4:f2:8a:72:92:83:08:43:92:b1:
         1a:30:79:5f:4a:c6:45:7a:06:74:cf:e1:f4:3b:fe:ec:f9:6b:
         e6:08:5f:58:e3:3b:86:c0:2f:14:66:2c:96:43:24:55:51:f7:
         2f:86:41:c5:62:1c:79:9d:a0:62:c4:4d:ea:c8:62:4c:2f:9c:
         57:30:d0:a4:52:09:06:13:64:a2:7f:db:de:e2:3d:f1:bd:3c:
         1c:79:aa:27:4b:86:26:09:d9:cf:c7:18:ff:3b:de:8f:45:a8:
         9e:cb:74:d2:71:3c:13:fd:fc:51:f7:de:95:38:5a:93:81:08:
         21:8b:25:2e:f2:69:ac:c2:9f:f6:dd:ea:02:57:6a:b0:f2:e3:
         83:b2:b5:43
-----BEGIN CERTIFICATE-----
MIIDgDCCAmigAwIBAgIUDSXJo+RUjDUVC8zPpaYr/Zfp0N4wDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw
MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMlcwGY9x3LuGCPXVoA8ssJXgaN0nAUH5xpwugwI/BTbUhYD
K5C7ARphZVIZipsILu0AKTGjinswMonLPU4eokz2If9eApx/euANHMvX6e6eZD+z
yhd5wTadUYcGLcH0KPKLSanSEom0YGBlAG8Jg/iVlMqMcC0d4HtC/FNLQIzTZ6Es
CsdTiq8xkVsSzUvQGREizIKUEInwsq7wEW6Ru6V3icn9N+qwCZp6v3vp1fVWE6+z
2T/EkFqx7e7eb4YWYfYtFclulPJyWOdeq/EqQrFsx839sS1I4LPECea94fk7G6Vc
3A25QC1Vr3CyAc+DNYVPtKn8M/M89zAMwMUiBYUCAwEAAaOByzCByDAdBgNVHQ4E
FgQUTOLu5dwr0HRJQ7pta5Fvo8BTiZIwHwYDVR0jBBgwFoAUzJRBz6n3x1h8N+PF
NymbErPf1TswNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs
LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m
b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIFoDAPBgNVHRMBAf8EBTADAQH/
MA0GCSqGSIb3DQEBCwUAA4IBAQCJMvoM+u13tDa/auD45yecRebOfADLhZLkpo7a
QjVJLyX4Cxxm+ho2MIfoHuHrwXInDgYi5ptA7RJytcYfHIdAWIzu1jvxTJ6IjohF
W6jh3sldFtJWnEknTgegOvjprW94jcLOA59JUL4btqX5iElzsvWCwOTyinKSgwhD
krEaMHlfSsZFegZ0z+H0O/7s+WvmCF9Y4zuGwC8UZiyWQyRVUfcvhkHFYhx5naBi
xE3qyGJML5xXMNCkUgkGE2Sif9ve4j3xvTwceaonS4YmCdnPxxj/O96PRaiey3TS
cTwT/fxR996VOFqTgQghiyUu8mmswp/23eoCV2qw8uODsrVD
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:25:c9:a3:e4:54:8c:35:15:0b:cc:cf:a5:a6:2b:fd:97:e9:d0:dd
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:41:ee:d5:da:d2:45:d6:49:60:20:14:fb:
                    2c:a9:de:97:50:8e:1c:2f:82:c0:f5:ad:ae:58:ca:
                    46:cb:e5:cc:19:4f:e3:4f:15:7f:41:d4:b7:34:f3:
                    3d:da:86:6d:1a:d0:ab:f0:76:82:ea:a5:db:fb:c2:
                    e3:56:ac:4a:f0:33:57:d5:82:9e:72:db:2c:36:a3:
                    1b:d9:b1:e6:27:1c:98:7e:42:37:b6:21:bd:5a:18:
                    61:bc:6f:77:d7:0c:07:13:39:70:a1:46:08:9f:12:
                    05:c9:ac:a4:57:78:b5:8f:bc:6d:ca:b2:b0:24:ff:
                    fd:9c:61:9f:28:2f:7e:bb:d2:e3:2a:81:ed:f5:b7:
                    84:c9:be:fa:04:3c:29:e8:1f:ca:68:44:08:27:e3:
                    fc:ba:ce:74:19:59:c5:cd:9e:cb:a3:4a:e5:0f:d9:
                    78:38:b4:8c:c8:5f:a6:93:48:13:83:cc:a9:d2:60:
                    45:61:0d:00:22:84:88:ea:e3:dd:da:f0:05:c8:09:
                    3a:b2:3e:5b:6e:3e:c6:18:47:ff:18:54:b6:c0:6e:
                    fc:df:75:4b:2f:23:30:a1:8e:e2:4b:8b:63:fc:80:
                    83:62:eb:c9:a5:fe:ed:26:37:ad:59:ef:79:6a:2d:
                    67:d6:f9:5c:88:5e:19:62:05:55:9a:26:e5:61:b3:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CC:94:41:CF:A9:F7:C7:58:7C:37:E3:C5:37:29:9B:12:B3:DF:D5:3B
            X509v3 Authority Key Identifier: 
                keyid:CC:94:41:CF:A9:F7:C7:58:7C:37:E3:C5:37:29:9B:12:B3:DF:D5:3B

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         8a:5e:41:07:3f:f2:13:d9:65:64:7f:f6:68:72:42:6d:fa:5c:
         05:01:6b:1f:2f:2e:42:ca:f9:da:b7:95:03:fb:ea:75:d8:93:
         92:f3:60:84:40:d5:6c:cb:9b:43:a3:b5:b1:e2:2f:4d:25:3a:
         8b:84:12:54:58:0d:17:7e:33:28:7b:3c:5c:f1:6b:9f:77:39:
         98:8c:7d:31:95:7f:66:8d:9d:7d:86:35:6d:66:65:43:ce:d7:
         ef:9f:4a:6c:2c:97:e7:e9:7a:7a:2d:46:62:6a:2f:e2:d8:72:
         10:60:e5:0b:76:c7:5f:8e:69:67:60:32:f2:02:32:d0:dd:01:
         90:53:49:fe:84:1f:1f:56:82:7e:1c:44:10:b9:cb:0c:46:3d:
         17:7c:6d:6c:f8:89:85:f3:64:36:9c:3d:a4:47:ac:a9:38:97:
         8c:86:b7:0c:12:76:7c:a8:63:19:c6:7d:3e:b8:dd:c3:e3:a2:
         cc:e0:57:8a:79:a5:78:1b:6e:2c:e3:b7:09:b2:82:61:ff:db:
         0c:d6:1d:59:bf:d4:59:e3:ca:a4:7d:cc:22:82:45:65:6a:b1:
         d2:ad:bf:d6:74:cb:bd:ad:99:4f:7e:08:7f:32:97:ab:1e:30:
         15:16:46:db:b7:6f:5a:4c:e7:ed:65:f9:f2:c6:a5:d1:ec:0c:
         ea:92:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----