[Created by: ./generate-chains.py]

Certificate chain where the target certificate contains an unknown X.509v3
extension (OID=1.2.3.4) that is marked as critical.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9a:ac:ff:32:38:c0:2f:b6:e5:63:63:94:45:6d:aa:aa:c4:b6:e5
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:ea:3a:1c:14:a1:db:ad:2c:18:3d:25:9c:
                    dc:1c:0f:2b:1e:42:df:c2:7c:b4:39:e6:4b:45:eb:
                    d3:a2:1c:2b:dc:f2:8c:08:f5:81:df:bd:fa:a2:1a:
                    1c:5c:99:cb:00:c7:31:02:c8:44:5f:31:cf:9c:82:
                    6d:3c:0c:5d:f7:d6:cc:91:fe:f3:e7:7a:08:17:85:
                    d5:75:61:ee:dd:66:55:3c:e2:68:98:36:19:20:e4:
                    9b:cd:24:6c:a3:5d:89:84:80:2e:c7:11:4e:c1:82:
                    b2:80:ce:0f:e9:6a:42:54:10:fb:c0:0a:53:be:19:
                    01:38:ba:06:c5:93:93:1c:84:aa:25:c7:c5:9a:4d:
                    32:2e:a4:13:5e:6d:07:d6:9d:e5:b0:29:63:da:14:
                    b7:62:51:63:93:dc:28:ae:4a:bc:35:ac:c0:06:ea:
                    ea:0b:d5:70:61:3b:05:78:e4:d3:ad:c3:ad:95:f1:
                    48:e5:79:a6:dc:12:1f:14:4f:21:9f:ca:6f:7a:dd:
                    d6:45:c8:8a:60:96:1c:02:06:16:18:80:21:58:6a:
                    f6:83:3e:1a:98:b8:b2:a9:22:44:c2:25:e9:dc:a9:
                    aa:bf:1d:2e:3f:2e:a1:78:08:93:04:4c:c4:1f:f9:
                    b3:34:9f:a7:78:5b:02:a6:ca:d3:1f:fa:ba:4d:34:
                    a2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D6:55:4E:AC:07:84:35:A9:0D:9A:63:45:82:73:4E:A4:CC:53:B0:02
            X509v3 Authority Key Identifier: 
                8A:E3:E6:F6:58:6F:1C:90:B4:67:A5:14:D8:64:E7:F7:00:77:61:01
            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://url-for-crl/Intermediate.crl
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            1.2.3.4: critical
                ....
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        2d:da:b3:73:a9:3c:2f:ac:6f:a6:db:80:c2:82:ea:0f:6e:bd:
        58:35:f5:d5:69:3f:73:26:e6:80:cd:39:d1:cf:38:f8:19:dd:
        f7:cf:57:70:44:3b:83:5a:8d:91:7b:02:a9:e8:ef:06:1e:b6:
        4b:97:ff:0e:96:ee:fe:85:ea:b4:93:ba:0e:b1:15:ef:ff:f6:
        be:0d:f2:2a:d6:2d:df:43:a9:e8:a0:e3:50:bb:56:af:51:05:
        1d:50:f3:58:f4:41:f0:ea:b4:1e:34:99:ac:d5:b8:34:78:96:
        73:2e:62:e5:7e:b5:1d:e4:08:52:b4:8f:28:bf:b7:75:23:71:
        f2:31:b2:ad:eb:4c:94:ec:79:09:0c:8b:94:38:a8:c8:82:e8:
        42:e4:72:50:bc:4b:8e:0d:e8:c0:77:a7:94:8e:d4:35:36:73:
        d4:1e:32:8f:19:14:8e:eb:26:61:bb:c9:9c:b5:71:08:40:61:
        52:8f:1e:a3:3d:01:2c:c8:a5:b5:c7:ac:42:ee:75:2b:a2:e7:
        77:65:98:1d:02:1c:95:d3:8a:1d:17:71:82:86:5c:f3:a9:44:
        e0:54:c5:51:84:b4:3c:c9:f1:bd:25:2d:cb:23:f2:72:d2:8c:
        f9:2d:c5:2a:4b:14:f5:df:65:53:e5:fb:2e:71:02:03:c5:6e:
        6f:0a:68:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----