| [Created by: generate-chains.py] |
| |
| Certificate chain where the intermediate's Basic Constraints extension is |
| not marked as critical. |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 4a:45:83:31:ef:c5:47:03:ae:f7:5a:80:bf:fb:8c:bc:23:1e:dc:c4 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Intermediate |
| Validity |
| Not Before: Oct 5 12:00:00 2021 GMT |
| Not After : Oct 5 12:00:00 2022 GMT |
| Subject: CN=Target |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| RSA Public-Key: (2048 bit) |
| Modulus: |
| 00:d8:cc:f6:ec:23:eb:20:d2:0e:7e:29:04:ec:8c: |
| b9:bd:ee:47:6e:0b:ac:a9:fa:22:a4:fc:41:74:04: |
| d0:b5:8a:37:56:29:d5:be:e7:e0:45:88:30:d9:5a: |
| e0:a7:69:fd:d1:c3:4d:1c:42:68:ae:7d:cf:54:db: |
| 84:b9:91:e6:68:c5:d1:6d:a4:34:4a:7f:8f:3e:a3: |
| a8:c4:0e:3f:90:42:a9:b8:84:c2:fd:51:ed:eb:e9: |
| 6d:cc:5a:22:f7:fb:eb:29:7d:5d:97:9d:26:eb:10: |
| 29:bf:2a:bd:b0:2f:33:9b:e7:a3:17:9b:db:b4:ce: |
| f8:5e:66:25:7c:8c:e3:c8:53:cf:c2:c3:80:cf:e6: |
| 68:98:ca:bd:e3:b8:d3:bc:e2:03:d0:31:5b:ef:21: |
| 6d:2d:42:5e:cb:9a:3a:4d:7a:bd:e7:75:75:ff:63: |
| 95:aa:08:20:fb:a8:6f:95:a9:ea:45:07:c4:a7:32: |
| 89:58:94:98:76:2f:5d:d4:85:90:e3:be:96:33:1c: |
| 53:d7:bd:58:87:75:4e:8c:c9:c9:6b:c8:b6:3f:d3: |
| 46:1a:9f:4c:de:a5:48:cd:ad:87:fe:7a:82:f2:0c: |
| 65:84:f5:09:ce:cf:fd:6c:66:57:91:dc:fb:85:d1: |
| ff:b2:4c:ce:2f:a3:73:b1:dc:1e:13:5c:03:1a:a6: |
| 99:13 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| FD:20:6C:45:13:AE:E6:1F:25:FD:C9:1E:E3:09:32:CC:34:28:4E:CF |
| X509v3 Authority Key Identifier: |
| keyid:5A:44:77:BA:2D:5E:48:FE:11:68:59:58:40:91:67:E2:22:BF:31:38 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Intermediate.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Intermediate.crl |
| |
| X509v3 Key Usage: critical |
| Digital Signature, Key Encipherment |
| X509v3 Extended Key Usage: |
| TLS Web Server Authentication, TLS Web Client Authentication |
| Signature Algorithm: sha256WithRSAEncryption |
| da:44:ec:6a:27:0f:44:9c:43:dd:cd:b9:a1:e9:a6:fd:10:d9: |
| 2e:b6:70:7d:27:f3:af:2e:14:36:ba:13:0b:65:1d:69:c6:17: |
| 28:bc:8f:0f:bb:b6:ca:f7:77:9a:ac:d6:2f:60:4b:51:2d:0f: |
| 28:9e:3f:7c:0f:03:40:d4:bf:80:78:3c:55:fa:ef:94:e2:db: |
| 2c:9c:47:a2:ea:6d:da:60:40:2c:38:e0:c4:41:a4:9d:5a:9d: |
| 15:3e:04:36:e1:ac:6f:cd:b2:af:af:b0:79:e9:ee:37:78:00: |
| ad:22:ae:fb:9e:79:be:41:0a:26:d8:ed:4d:8e:3f:5e:66:fd: |
| 66:e5:9b:4d:02:87:00:d6:9a:5d:29:c9:6c:db:56:4f:f4:69: |
| cf:08:ad:4f:64:0e:ec:73:7a:54:90:17:cc:6e:29:6c:a3:0c: |
| db:cb:54:4d:e1:fc:3d:7c:82:38:18:40:5c:b3:cb:10:dd:b9: |
| e4:3f:2b:19:0f:a2:bb:f0:d6:bc:bc:30:03:96:c7:0c:73:f5: |
| b0:53:b3:5c:8c:8e:c0:d5:05:05:39:a6:62:52:9a:c1:8d:74: |
| 29:6a:93:ef:29:53:52:63:14:fc:f9:b9:1b:34:dc:7f:4f:ba: |
| 30:c9:4f:5e:61:73:f2:df:c3:ae:51:37:26:ee:8e:4b:91:16: |
| d5:c2:a5:ce |
| -----BEGIN CERTIFICATE----- |
| MIIDoDCCAoigAwIBAgIUSkWDMe/FRwOu91qAv/uMvCMe3MQwDQYJKoZIhvcNAQEL |
| BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTIxMTAwNTEyMDAwMFoXDTIy |
| MTAwNTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF |
| AAOCAQ8AMIIBCgKCAQEA2Mz27CPrINIOfikE7Iy5ve5HbgusqfoipPxBdATQtYo3 |
| VinVvufgRYgw2Vrgp2n90cNNHEJorn3PVNuEuZHmaMXRbaQ0Sn+PPqOoxA4/kEKp |
| uITC/VHt6+ltzFoi9/vrKX1dl50m6xApvyq9sC8zm+ejF5vbtM74XmYlfIzjyFPP |
| wsOAz+ZomMq947jTvOID0DFb7yFtLUJey5o6TXq953V1/2OVqggg+6hvlanqRQfE |
| pzKJWJSYdi9d1IWQ476WMxxT171Yh3VOjMnJa8i2P9NGGp9M3qVIza2H/nqC8gxl |
| hPUJzs/9bGZXkdz7hdH/skzOL6NzsdweE1wDGqaZEwIDAQABo4HpMIHmMB0GA1Ud |
| DgQWBBT9IGxFE67mHyX9yR7jCTLMNChOzzAfBgNVHSMEGDAWgBRaRHe6LV5I/hFo |
| WVhAkWfiIr8xODA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91 |
| cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0 |
| dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIF |
| oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD |
| ggEBANpE7GonD0ScQ93NuaHppv0Q2S62cH0n868uFDa6EwtlHWnGFyi8jw+7tsr3 |
| d5qs1i9gS1EtDyieP3wPA0DUv4B4PFX675Ti2yycR6LqbdpgQCw44MRBpJ1anRU+ |
| BDbhrG/Nsq+vsHnp7jd4AK0irvueeb5BCibY7U2OP15m/Wblm00ChwDWml0pyWzb |
| Vk/0ac8IrU9kDuxzelSQF8xuKWyjDNvLVE3h/D18gjgYQFyzyxDdueQ/KxkPorvw |
| 1ry8MAOWxwxz9bBTs1yMjsDVBQU5pmJSmsGNdClqk+8pU1JjFPz5uRs03H9PujDJ |
| T15hc/Lfw65RNybujkuRFtXCpc4= |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 2d:b0:5d:cd:6e:fd:4d:77:89:ef:99:fc:fd:05:d3:22:44:3f:93:ef |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Oct 5 12:00:00 2021 GMT |
| Not After : Oct 5 12:00:00 2022 GMT |
| Subject: CN=Intermediate |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| RSA Public-Key: (2048 bit) |
| Modulus: |
| 00:fb:af:dd:12:ab:aa:06:e0:72:bd:43:4c:3e:5b: |
| cd:02:9c:ca:c1:42:6d:cd:47:6e:6c:4c:6b:3f:2e: |
| c1:3f:2e:88:3d:77:4f:1c:34:60:ba:f7:fb:58:64: |
| 3c:c2:76:5d:30:88:48:22:81:2f:27:c8:1f:b4:ed: |
| 96:07:5d:f7:7c:4a:37:be:fe:4f:7b:1f:19:82:21: |
| 24:18:c9:ae:a7:a5:58:62:9d:6b:f9:9a:88:56:0f: |
| 7f:b4:0c:1a:d5:4f:ab:2c:c4:97:6e:ec:db:b1:a0: |
| 43:86:34:08:2e:21:16:f8:f6:3e:2a:e8:ca:9a:a4: |
| fb:91:7e:f9:43:19:42:08:10:7e:92:af:60:45:4e: |
| 30:e4:d3:d3:e9:bf:32:cf:c1:1b:a0:52:6e:a4:aa: |
| ed:13:6d:e8:7f:68:c6:88:84:67:20:8f:6b:82:9c: |
| 49:5d:b4:95:63:9d:0a:dc:9f:ab:7b:b3:eb:f7:ad: |
| 48:35:f5:44:ec:84:23:e1:5b:ca:49:16:e0:c2:5a: |
| 8f:3e:d2:2b:fa:50:08:bf:12:3b:da:8c:96:66:93: |
| 69:5b:27:4e:b8:e7:8d:11:14:e6:29:23:b5:d9:f7: |
| b0:f9:e2:90:e2:d8:be:8d:1d:dc:89:f5:eb:15:df: |
| 58:88:e8:91:14:94:9d:37:e3:10:1a:de:30:3c:18: |
| d7:6f |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 5A:44:77:BA:2D:5E:48:FE:11:68:59:58:40:91:67:E2:22:BF:31:38 |
| X509v3 Authority Key Identifier: |
| keyid:B8:16:92:87:E1:0C:B9:E5:61:C3:DA:A5:05:11:6A:58:DD:78:65:8E |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 3c:1a:07:71:b2:e0:cd:a3:3f:a4:a3:32:26:a8:6b:f8:72:83: |
| 0c:f1:e9:88:03:59:53:33:1f:b3:9b:cd:93:c9:ed:e3:ca:a2: |
| ef:43:ac:87:8c:7f:9a:06:6b:85:41:a2:c3:25:6a:82:12:39: |
| 8c:57:22:37:86:6e:08:28:86:aa:ea:60:21:95:b5:ec:d5:2e: |
| 39:90:89:e1:76:5d:71:e0:3f:42:92:5e:17:2e:09:88:48:b3: |
| e3:83:e5:b6:ec:67:e0:03:1d:11:4a:df:4f:6e:f5:18:8b:7f: |
| 79:8c:89:69:59:45:9b:f7:f6:f3:ea:83:fe:05:49:bb:13:64: |
| d4:28:0c:78:83:1d:f6:17:86:16:5a:f7:81:06:11:ce:ef:35: |
| 8d:79:7d:f1:d1:ff:a7:a9:b3:1a:f4:a3:20:b0:0f:d0:d3:5b: |
| 1c:f6:1d:73:3d:96:8c:e6:19:70:a4:55:a5:ad:a8:f0:93:46: |
| f4:40:41:b2:3c:b3:78:1b:eb:74:29:6c:3f:7e:7f:f5:b0:c0: |
| e3:60:e1:8e:cc:a7:70:00:3d:de:66:f6:ee:e5:17:61:1f:c4: |
| d0:1c:f7:1c:19:5d:cd:e8:a6:45:14:d4:f0:78:87:7f:30:0f: |
| 91:f8:8e:4c:d8:37:cf:c7:c1:08:c4:76:0f:7d:b9:48:06:89: |
| 6a:05:b1:4d |
| -----BEGIN CERTIFICATE----- |
| MIIDfTCCAmWgAwIBAgIULbBdzW79TXeJ75n8/QXTIkQ/k+8wDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw |
| MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD |
| ggEPADCCAQoCggEBAPuv3RKrqgbgcr1DTD5bzQKcysFCbc1HbmxMaz8uwT8uiD13 |
| Txw0YLr3+1hkPMJ2XTCISCKBLyfIH7Ttlgdd93xKN77+T3sfGYIhJBjJrqelWGKd |
| a/maiFYPf7QMGtVPqyzEl27s27GgQ4Y0CC4hFvj2Piroypqk+5F++UMZQggQfpKv |
| YEVOMOTT0+m/Ms/BG6BSbqSq7RNt6H9oxoiEZyCPa4KcSV20lWOdCtyfq3uz6/et |
| SDX1ROyEI+FbykkW4MJajz7SK/pQCL8SO9qMlmaTaVsnTrjnjREU5ikjtdn3sPni |
| kOLYvo0d3In16xXfWIjokRSUnTfjEBreMDwY128CAwEAAaOByDCBxTAdBgNVHQ4E |
| FgQUWkR3ui1eSP4RaFlYQJFn4iK/MTgwHwYDVR0jBBgwFoAUuBaSh+EMueVhw9ql |
| BRFqWN14ZY4wNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs |
| LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m |
| b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAMBgNVHRMEBTADAQH/MA0G |
| CSqGSIb3DQEBCwUAA4IBAQA8GgdxsuDNoz+kozImqGv4coMM8emIA1lTMx+zm82T |
| ye3jyqLvQ6yHjH+aBmuFQaLDJWqCEjmMVyI3hm4IKIaq6mAhlbXs1S45kInhdl1x |
| 4D9Ckl4XLgmISLPjg+W27GfgAx0RSt9PbvUYi395jIlpWUWb9/bz6oP+BUm7E2TU |
| KAx4gx32F4YWWveBBhHO7zWNeX3x0f+nqbMa9KMgsA/Q01sc9h1zPZaM5hlwpFWl |
| rajwk0b0QEGyPLN4G+t0KWw/fn/1sMDjYOGOzKdwAD3eZvbu5RdhH8TQHPccGV3N |
| 6KZFFNTweId/MA+R+I5M2DfPx8EIxHYPfblIBolqBbFN |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 2d:b0:5d:cd:6e:fd:4d:77:89:ef:99:fc:fd:05:d3:22:44:3f:93:ee |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Oct 5 12:00:00 2021 GMT |
| Not After : Oct 5 12:00:00 2022 GMT |
| Subject: CN=Root |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| RSA Public-Key: (2048 bit) |
| Modulus: |
| 00:aa:94:1d:65:8c:79:04:f0:c9:d1:3c:23:76:e9: |
| 3e:2c:c9:52:e1:fc:b9:bf:35:8d:66:e4:37:66:b5: |
| 4b:ff:1a:9b:cb:30:e1:d4:30:54:fb:6e:f2:43:fd: |
| 76:b8:84:51:79:12:5a:65:95:87:ec:3d:19:b0:ab: |
| 04:94:64:aa:bc:e5:bf:e2:77:fd:07:28:3c:b5:20: |
| da:55:2c:79:04:f2:71:6e:31:b4:63:14:80:4e:c3: |
| 83:1e:ea:7e:5a:c0:4d:48:4a:2e:9e:52:80:80:98: |
| 22:10:4a:05:d7:db:13:8f:37:67:20:63:19:01:92: |
| 07:46:94:b5:c9:ba:e7:68:af:06:57:35:69:50:50: |
| 22:23:0b:92:a1:98:32:08:88:5c:8b:4c:7c:a5:6a: |
| f3:31:ee:bf:4c:59:b0:a1:cb:e8:28:1d:fa:4c:d3: |
| 1b:e6:2b:03:1a:4f:b5:8d:93:5d:18:95:c7:93:c1: |
| 8b:6f:55:17:34:17:e9:d8:70:47:c8:4c:b2:5a:fa: |
| a7:aa:66:b7:a3:62:17:0a:7c:27:15:ef:c2:bc:5b: |
| 7a:7d:88:c7:2a:45:0c:d7:3b:91:7e:72:c6:30:cb: |
| 12:39:1e:a2:8a:88:39:30:f0:54:b4:19:6f:b6:5e: |
| e8:01:60:2c:2b:27:cb:e5:93:49:ab:b8:9e:f0:29: |
| e6:c7 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| B8:16:92:87:E1:0C:B9:E5:61:C3:DA:A5:05:11:6A:58:DD:78:65:8E |
| X509v3 Authority Key Identifier: |
| keyid:B8:16:92:87:E1:0C:B9:E5:61:C3:DA:A5:05:11:6A:58:DD:78:65:8E |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 86:e3:13:ea:c4:23:12:a4:15:aa:2d:23:f7:2a:4f:97:f4:57: |
| 05:f5:d5:a8:aa:a1:dd:ad:a6:c2:6a:f4:d8:2d:f4:5c:2d:7a: |
| d4:6f:9c:ea:a9:09:e3:62:86:1f:aa:59:fe:d8:6b:35:0a:a1: |
| c4:87:8b:4d:b4:30:1f:9d:10:35:d8:94:82:bf:b4:42:dc:1d: |
| 94:af:01:45:40:6e:02:e6:fa:b5:78:f5:ed:97:23:4c:95:cc: |
| 89:33:69:83:59:04:fd:fa:48:5f:63:7d:08:9d:f1:26:a2:c1: |
| 71:74:68:00:13:1c:d4:70:45:52:f5:a2:57:5b:34:1d:6b:e9: |
| fe:8c:46:84:2a:99:2a:3a:58:31:d9:be:35:5e:c8:97:34:f3: |
| 6d:c3:d3:23:30:e2:fc:35:1f:82:68:02:ad:df:85:7b:4b:63: |
| 96:b1:fc:1f:3c:68:04:63:1d:bf:ab:e5:9e:1a:8c:4f:d1:d5: |
| 44:70:b4:4f:2b:30:a6:39:1c:4a:5e:4f:05:64:0d:83:3d:1d: |
| 3b:17:b3:0b:b7:f4:ee:f5:44:47:36:92:aa:dd:30:74:68:0f: |
| 07:da:14:c2:b3:b0:80:2a:0c:36:c0:a2:a6:77:f1:0c:e0:e2: |
| 80:5e:2d:98:f1:af:b0:24:81:4f:d3:1e:df:46:95:fe:5e:8b: |
| 44:84:a8:e0 |
| -----BEGIN CERTIFICATE----- |
| MIIDeDCCAmCgAwIBAgIULbBdzW79TXeJ75n8/QXTIkQ/k+4wDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw |
| MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK |
| AoIBAQCqlB1ljHkE8MnRPCN26T4syVLh/Lm/NY1m5DdmtUv/GpvLMOHUMFT7bvJD |
| /Xa4hFF5ElpllYfsPRmwqwSUZKq85b/id/0HKDy1INpVLHkE8nFuMbRjFIBOw4Me |
| 6n5awE1ISi6eUoCAmCIQSgXX2xOPN2cgYxkBkgdGlLXJuudorwZXNWlQUCIjC5Kh |
| mDIIiFyLTHylavMx7r9MWbChy+goHfpM0xvmKwMaT7WNk10YlceTwYtvVRc0F+nY |
| cEfITLJa+qeqZrejYhcKfCcV78K8W3p9iMcqRQzXO5F+csYwyxI5HqKKiDkw8FS0 |
| GW+2XugBYCwrJ8vlk0mruJ7wKebHAgMBAAGjgcswgcgwHQYDVR0OBBYEFLgWkofh |
| DLnlYcPapQURaljdeGWOMB8GA1UdIwQYMBaAFLgWkofhDLnlYcPapQURaljdeGWO |
| MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh |
| L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S |
| b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG |
| 9w0BAQsFAAOCAQEAhuMT6sQjEqQVqi0j9ypPl/RXBfXVqKqh3a2mwmr02C30XC16 |
| 1G+c6qkJ42KGH6pZ/thrNQqhxIeLTbQwH50QNdiUgr+0QtwdlK8BRUBuAub6tXj1 |
| 7ZcjTJXMiTNpg1kE/fpIX2N9CJ3xJqLBcXRoABMc1HBFUvWiV1s0HWvp/oxGhCqZ |
| KjpYMdm+NV7IlzTzbcPTIzDi/DUfgmgCrd+Fe0tjlrH8HzxoBGMdv6vlnhqMT9HV |
| RHC0TyswpjkcSl5PBWQNgz0dOxezC7f07vVERzaSqt0wdGgPB9oUwrOwgCoMNsCi |
| pnfxDODigF4tmPGvsCSBT9Me30aV/l6LRISo4A== |
| -----END CERTIFICATE----- |
