| [Created by: generate-chains.py] |
| |
| Certificate chain where the target was signed by a different |
| certificate with a different key. The target lacks an |
| authorityKeyIdentifier extension as some verifiers will not try verifying with |
| the bogus intermediate if the authorityKeyIdentifier does not match the |
| intermediate's subjectKeyIdentifier. |
| |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 2c:6b:f0:a5:aa:60:49:5e:d6:8b:7f:f5:b2:89:be:f7:78:1d:89:d2 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Intermediate |
| Validity |
| Not Before: Oct 5 12:00:00 2021 GMT |
| Not After : Oct 5 12:00:00 2022 GMT |
| Subject: CN=Target |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| RSA Public-Key: (2048 bit) |
| Modulus: |
| 00:b6:34:1b:30:e4:7d:b9:40:ec:8c:d8:b7:d5:4d: |
| a0:0c:85:66:25:a7:bf:16:c2:d8:4e:6a:b5:d1:3c: |
| c1:63:a8:ff:96:24:87:59:14:9b:e0:00:8b:75:7a: |
| 52:5d:7d:a5:1d:fc:1d:f8:4b:eb:e3:74:b5:8d:e8: |
| 43:8d:dc:b9:3d:d5:47:86:fb:c7:d8:56:b6:91:03: |
| 76:56:ba:f9:35:6b:b6:71:44:51:a2:7c:24:02:e5: |
| f0:7c:67:34:21:e0:10:31:54:f9:6d:96:43:33:a6: |
| bb:ca:4c:f8:31:a4:16:93:6d:15:50:0a:5e:43:77: |
| ab:2d:4b:ce:79:80:ec:95:0c:a2:9b:7a:72:7d:f5: |
| a6:4a:28:14:a3:b8:eb:8f:88:84:08:e5:00:86:30: |
| aa:53:6f:b2:9e:5f:85:85:29:dd:94:aa:94:28:8a: |
| ca:50:13:f9:ac:08:64:8c:b9:80:65:ff:65:c1:a6: |
| 48:75:df:b0:9a:8c:0b:c8:d0:07:a9:8b:9f:16:69: |
| 51:81:c9:8a:33:81:3f:04:57:2c:06:53:c6:2e:c7: |
| 4c:99:6d:65:2b:a4:c0:b6:6a:ca:37:05:38:2a:64: |
| b0:7f:e5:ad:3b:90:77:bd:86:53:34:18:00:46:6a: |
| 37:0f:85:39:c5:95:96:ab:bd:a3:81:09:69:40:22: |
| 09:b7 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 7A:1C:A0:65:5A:CD:B7:F6:57:2D:AA:6C:C2:A7:B0:AE:60:FE:61:02 |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Intermediate.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Intermediate.crl |
| |
| X509v3 Key Usage: critical |
| Digital Signature, Key Encipherment |
| X509v3 Extended Key Usage: |
| TLS Web Server Authentication, TLS Web Client Authentication |
| X509v3 Subject Alternative Name: |
| DNS:test.example |
| Signature Algorithm: sha256WithRSAEncryption |
| 42:20:d3:44:c7:c2:bf:44:3f:d3:c7:df:6f:15:17:34:04:40: |
| 4d:c6:d4:a9:2c:06:b1:41:78:4a:57:00:f3:65:22:17:ed:42: |
| 5a:e9:5d:a6:22:25:c0:9a:e0:1d:0b:5c:c6:fd:0e:05:6c:11: |
| b8:ae:cd:ad:91:bf:b9:4e:bb:81:28:a7:7e:47:01:0b:e4:73: |
| 29:4b:9a:6e:cd:01:0e:e6:3e:f0:19:49:24:1d:8e:04:5e:4d: |
| 1f:64:ad:5a:90:d8:22:18:7a:66:10:cd:4d:6a:2c:f4:31:82: |
| f0:31:e4:c5:2e:a5:1e:3c:52:77:de:c5:02:fc:0f:68:ee:8c: |
| 1c:24:4a:da:41:ba:ed:bc:4d:c0:f7:f0:27:7b:44:8f:ac:be: |
| e0:d5:49:89:c1:98:53:6c:7e:f3:27:82:70:a5:03:01:0e:39: |
| 82:b0:53:6e:26:5d:5e:a7:e6:8a:bf:8c:4e:00:38:1c:65:42: |
| c0:ff:8c:36:4f:fe:2f:1a:fd:3c:6a:75:3d:05:19:88:23:f3: |
| 84:eb:fd:53:2c:f4:98:c1:38:bb:a5:fb:a8:f7:b5:9d:1d:d1: |
| 20:33:2d:b1:68:f8:55:8b:63:df:20:f4:3b:88:0d:03:e0:4a: |
| 75:b4:b3:0b:c5:03:49:1d:18:78:65:93:bc:b0:66:61:e5:64: |
| b4:0a:e0:e6 |
| -----BEGIN CERTIFICATE----- |
| MIIDmDCCAoCgAwIBAgIULGvwpapgSV7Wi3/1som+93gdidIwDQYJKoZIhvcNAQEL |
| BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTIxMTAwNTEyMDAwMFoXDTIy |
| MTAwNTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF |
| AAOCAQ8AMIIBCgKCAQEAtjQbMOR9uUDsjNi31U2gDIVmJae/FsLYTmq10TzBY6j/ |
| liSHWRSb4ACLdXpSXX2lHfwd+Evr43S1jehDjdy5PdVHhvvH2Fa2kQN2Vrr5NWu2 |
| cURRonwkAuXwfGc0IeAQMVT5bZZDM6a7ykz4MaQWk20VUApeQ3erLUvOeYDslQyi |
| m3pyffWmSigUo7jrj4iECOUAhjCqU2+ynl+FhSndlKqUKIrKUBP5rAhkjLmAZf9l |
| waZIdd+wmowLyNAHqYufFmlRgcmKM4E/BFcsBlPGLsdMmW1lK6TAtmrKNwU4KmSw |
| f+WtO5B3vYZTNBgARmo3D4U5xZWWq72jgQlpQCIJtwIDAQABo4HhMIHeMB0GA1Ud |
| DgQWBBR6HKBlWs239lctqmzCp7CuYP5hAjA/BggrBgEFBQcBAQQzMDEwLwYIKwYB |
| BQUHMAKGI2h0dHA6Ly91cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1Ud |
| HwQtMCswKaAnoCWGI2h0dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3Js |
| MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw |
| FwYDVR0RBBAwDoIMdGVzdC5leGFtcGxlMA0GCSqGSIb3DQEBCwUAA4IBAQBCINNE |
| x8K/RD/Tx99vFRc0BEBNxtSpLAaxQXhKVwDzZSIX7UJa6V2mIiXAmuAdC1zG/Q4F |
| bBG4rs2tkb+5TruBKKd+RwEL5HMpS5puzQEO5j7wGUkkHY4EXk0fZK1akNgiGHpm |
| EM1Naiz0MYLwMeTFLqUePFJ33sUC/A9o7owcJEraQbrtvE3A9/Ane0SPrL7g1UmJ |
| wZhTbH7zJ4JwpQMBDjmCsFNuJl1ep+aKv4xOADgcZULA/4w2T/4vGv08anU9BRmI |
| I/OE6/1TLPSYwTi7pfuo97WdHdEgMy2xaPhVi2PfIPQ7iA0D4Ep1tLMLxQNJHRh4 |
| ZZO8sGZh5WS0CuDm |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 7d:8c:81:7c:3f:7c:cd:c0:85:4b:99:ee:b9:df:b6:b1:07:4e:88:46 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Oct 5 12:00:00 2021 GMT |
| Not After : Oct 5 12:00:00 2022 GMT |
| Subject: CN=Intermediate |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| RSA Public-Key: (2048 bit) |
| Modulus: |
| 00:b4:e3:56:b9:b0:39:df:ba:72:ab:22:55:10:91: |
| 0b:ac:73:32:70:19:51:96:6b:17:ba:78:a2:c8:77: |
| cc:d2:b2:0e:9d:de:b5:3f:6b:8a:49:80:b9:a6:23: |
| 9e:96:82:ff:41:65:bd:86:e3:bd:a4:bf:b9:19:85: |
| f2:0a:c8:3a:b7:87:d5:d6:6f:2e:c3:72:35:36:46: |
| 98:ec:d9:fd:0e:61:cb:0a:d4:65:c5:5d:a7:e0:cd: |
| 6f:ed:92:40:03:62:1b:00:c6:c2:02:1a:de:f1:67: |
| d5:f6:0b:82:aa:7f:dc:72:08:5e:be:81:57:1d:66: |
| 9a:82:bb:d5:b1:78:de:f7:6f:b2:d7:26:5c:b5:47: |
| 65:32:91:41:70:0f:3e:23:89:70:e3:0a:be:aa:a9: |
| dd:0e:e2:6e:8d:49:30:af:bb:ad:bb:3e:4d:0f:6d: |
| 43:c2:3c:41:20:26:68:af:a7:ec:83:6c:2e:2d:43: |
| 7e:16:5b:93:8e:b4:6c:ba:e7:26:8c:d1:60:93:4b: |
| 78:10:e6:a6:cb:97:b9:4f:fb:fc:3f:f0:68:a1:22: |
| f0:20:bf:5f:21:89:a8:5b:8b:fb:7d:a9:b2:ed:13: |
| a3:3c:d1:4c:c7:e5:ba:8c:ca:8c:76:f6:89:aa:8f: |
| 6d:44:0a:a4:d1:18:66:65:e5:04:25:b1:86:84:e4: |
| 2a:73 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 51:9D:BA:B2:87:A5:E9:E6:E3:E1:DB:F3:1B:0C:67:CB:6C:D1:C5:A8 |
| X509v3 Authority Key Identifier: |
| keyid:FA:79:49:F6:69:64:80:41:9B:1E:E6:2C:39:F8:36:2C:0F:F4:82:66 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 99:68:59:0b:1e:31:c3:e6:9a:27:95:89:cc:0a:79:cf:95:39: |
| 77:83:21:22:e3:65:77:26:19:ab:f2:5f:14:7d:50:cb:82:1c: |
| 92:06:d0:6d:c2:dd:34:17:69:fe:a4:34:8a:fe:b4:5d:e5:29: |
| 6f:f4:88:82:4f:2c:3d:97:a7:b6:7a:2d:df:23:89:50:a8:21: |
| da:70:78:d7:c3:c3:3e:c0:1e:29:53:97:d0:5e:cd:c5:9e:7d: |
| 05:20:be:7a:29:8d:5e:31:84:4c:de:57:6b:55:91:30:06:60: |
| b2:73:94:99:98:8c:cb:6f:aa:81:00:49:99:48:a5:04:cb:cf: |
| bf:af:9f:0c:d8:43:16:7d:d9:a0:42:37:b8:3d:ec:f9:81:2d: |
| 4a:09:ce:69:14:99:95:92:69:ba:4f:9f:04:05:af:a7:7c:4b: |
| 93:44:90:fb:00:73:1f:0e:87:1c:53:1f:db:48:c7:b3:8f:94: |
| a2:06:e2:66:8d:35:16:3f:6f:53:f9:4d:3f:43:ac:0b:7f:d9: |
| 41:85:b3:7c:6e:33:b6:31:99:fc:ce:dd:c4:22:2d:65:dc:97: |
| e8:56:20:a8:80:d2:1e:b6:2a:19:e7:cb:fb:ff:26:f6:53:37: |
| 2f:23:52:eb:d7:89:e7:78:22:f7:e6:8e:fb:cb:15:25:4f:4e: |
| 79:81:72:6c |
| -----BEGIN CERTIFICATE----- |
| MIIDgDCCAmigAwIBAgIUfYyBfD98zcCFS5nuud+2sQdOiEYwDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw |
| MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD |
| ggEPADCCAQoCggEBALTjVrmwOd+6cqsiVRCRC6xzMnAZUZZrF7p4osh3zNKyDp3e |
| tT9rikmAuaYjnpaC/0FlvYbjvaS/uRmF8grIOreH1dZvLsNyNTZGmOzZ/Q5hywrU |
| ZcVdp+DNb+2SQANiGwDGwgIa3vFn1fYLgqp/3HIIXr6BVx1mmoK71bF43vdvstcm |
| XLVHZTKRQXAPPiOJcOMKvqqp3Q7ibo1JMK+7rbs+TQ9tQ8I8QSAmaK+n7INsLi1D |
| fhZbk460bLrnJozRYJNLeBDmpsuXuU/7/D/waKEi8CC/XyGJqFuL+32psu0TozzR |
| TMfluozKjHb2iaqPbUQKpNEYZmXlBCWxhoTkKnMCAwEAAaOByzCByDAdBgNVHQ4E |
| FgQUUZ26soel6ebj4dvzGwxny2zRxagwHwYDVR0jBBgwFoAU+nlJ9mlkgEGbHuYs |
| Ofg2LA/0gmYwNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs |
| LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m |
| b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/ |
| MA0GCSqGSIb3DQEBCwUAA4IBAQCZaFkLHjHD5ponlYnMCnnPlTl3gyEi42V3Jhmr |
| 8l8UfVDLghySBtBtwt00F2n+pDSK/rRd5Slv9IiCTyw9l6e2ei3fI4lQqCHacHjX |
| w8M+wB4pU5fQXs3Fnn0FIL56KY1eMYRM3ldrVZEwBmCyc5SZmIzLb6qBAEmZSKUE |
| y8+/r58M2EMWfdmgQje4Pez5gS1KCc5pFJmVkmm6T58EBa+nfEuTRJD7AHMfDocc |
| Ux/bSMezj5SiBuJmjTUWP29T+U0/Q6wLf9lBhbN8bjO2MZn8zt3EIi1l3JfoViCo |
| gNIetioZ58v7/yb2UzcvI1Lr14nneCL35o77yxUlT055gXJs |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 7d:8c:81:7c:3f:7c:cd:c0:85:4b:99:ee:b9:df:b6:b1:07:4e:88:44 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Oct 5 12:00:00 2021 GMT |
| Not After : Oct 5 12:00:00 2022 GMT |
| Subject: CN=Root |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| RSA Public-Key: (2048 bit) |
| Modulus: |
| 00:ba:f9:00:80:eb:0d:65:6c:30:78:a7:66:72:14: |
| df:06:ab:f7:a6:30:bc:62:50:81:94:e1:45:f7:47: |
| 38:1f:35:99:9a:b9:26:e5:7b:32:a3:71:df:02:84: |
| 22:a0:09:32:13:6b:05:5a:8c:3b:2a:59:1a:89:0e: |
| 08:58:d0:a5:74:bf:96:7a:16:67:00:22:23:7c:07: |
| 37:f8:da:e3:7c:8e:a2:d6:81:18:fb:51:b1:f5:e5: |
| 0d:c5:28:4f:17:59:25:42:08:e8:f0:14:1d:8d:03: |
| d7:1c:48:94:f3:2f:70:2d:c4:03:7c:06:c5:ca:dd: |
| 15:d3:1b:d4:c8:e4:af:e7:c0:a9:90:f9:a4:c6:d3: |
| e6:28:0f:b0:34:a4:aa:7b:a6:df:45:2e:8f:cc:ba: |
| e1:86:e6:98:74:22:07:cd:33:a3:8e:d3:79:5a:28: |
| a1:d4:a1:e6:b2:7d:c3:6d:9c:61:67:ce:ca:74:b6: |
| 6f:d7:32:4c:c9:f8:d8:f2:f0:60:97:3d:2b:e2:b4: |
| 67:6c:69:08:23:bd:8a:71:65:a9:3e:62:7f:15:76: |
| 08:0e:cb:a9:b2:68:51:5e:5c:19:b0:83:8f:41:98: |
| d8:b1:0e:ef:26:ac:c5:f7:e6:34:8d:71:5f:1e:bd: |
| d4:db:c5:69:47:47:7c:91:88:d0:8b:c4:e1:7a:61: |
| a4:45 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| FA:79:49:F6:69:64:80:41:9B:1E:E6:2C:39:F8:36:2C:0F:F4:82:66 |
| X509v3 Authority Key Identifier: |
| keyid:FA:79:49:F6:69:64:80:41:9B:1E:E6:2C:39:F8:36:2C:0F:F4:82:66 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 56:35:08:8f:8b:5e:ea:62:f3:6f:49:49:c3:45:54:12:cd:de: |
| ba:f2:66:12:99:c3:1f:01:bd:ac:08:3a:5e:12:3e:63:c5:b9: |
| 1f:05:81:3a:05:90:9b:d1:52:4a:bc:d2:61:2b:88:03:9b:03: |
| 5b:4c:da:04:c2:57:6a:e9:d9:ef:a4:50:d0:ae:af:99:0b:4a: |
| 98:e9:91:9a:4b:0c:3f:34:bb:c6:dd:c0:31:ba:28:1b:32:e9: |
| 12:48:90:3a:ec:cf:e1:82:95:34:93:02:69:c1:75:ba:57:3f: |
| 22:e2:76:f1:fa:8d:dd:d1:e2:ed:74:f4:69:c4:2c:79:ba:a7: |
| 86:e2:5c:fb:ab:2f:e6:67:b8:46:01:ab:23:d3:77:3b:1f:47: |
| 7b:a1:e0:66:7a:1f:c8:d8:b8:f1:91:94:70:4d:9a:c7:f6:ec: |
| a8:c5:b5:87:f6:df:5e:b0:6f:8f:6c:c8:18:6c:62:13:8a:ee: |
| 81:ff:7b:02:54:ab:e4:19:58:f5:57:e7:74:00:9b:e1:45:ac: |
| 1b:ef:89:c2:f9:e2:73:20:ba:ab:48:36:a3:d5:a4:a1:9e:1a: |
| 22:82:08:b0:9e:0d:46:dc:d2:4c:06:e2:80:b5:40:ef:c1:23: |
| 99:f7:79:62:5f:19:5b:1c:01:3c:70:0a:5f:d3:c4:43:ee:21: |
| 8a:dc:d3:ba |
| -----BEGIN CERTIFICATE----- |
| MIIDeDCCAmCgAwIBAgIUfYyBfD98zcCFS5nuud+2sQdOiEQwDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw |
| MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK |
| AoIBAQC6+QCA6w1lbDB4p2ZyFN8Gq/emMLxiUIGU4UX3RzgfNZmauSblezKjcd8C |
| hCKgCTITawVajDsqWRqJDghY0KV0v5Z6FmcAIiN8Bzf42uN8jqLWgRj7UbH15Q3F |
| KE8XWSVCCOjwFB2NA9ccSJTzL3AtxAN8BsXK3RXTG9TI5K/nwKmQ+aTG0+YoD7A0 |
| pKp7pt9FLo/MuuGG5ph0IgfNM6OO03laKKHUoeayfcNtnGFnzsp0tm/XMkzJ+Njy |
| 8GCXPSvitGdsaQgjvYpxZak+Yn8VdggOy6myaFFeXBmwg49BmNixDu8mrMX35jSN |
| cV8evdTbxWlHR3yRiNCLxOF6YaRFAgMBAAGjgcswgcgwHQYDVR0OBBYEFPp5SfZp |
| ZIBBmx7mLDn4NiwP9IJmMB8GA1UdIwQYMBaAFPp5SfZpZIBBmx7mLDn4NiwP9IJm |
| MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh |
| L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S |
| b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG |
| 9w0BAQsFAAOCAQEAVjUIj4te6mLzb0lJw0VUEs3euvJmEpnDHwG9rAg6XhI+Y8W5 |
| HwWBOgWQm9FSSrzSYSuIA5sDW0zaBMJXaunZ76RQ0K6vmQtKmOmRmksMPzS7xt3A |
| MbooGzLpEkiQOuzP4YKVNJMCacF1ulc/IuJ28fqN3dHi7XT0acQsebqnhuJc+6sv |
| 5me4RgGrI9N3Ox9He6HgZnofyNi48ZGUcE2ax/bsqMW1h/bfXrBvj2zIGGxiE4ru |
| gf97AlSr5BlY9VfndACb4UWsG++JwvnicyC6q0g2o9WkoZ4aIoIIsJ4NRtzSTAbi |
| gLVA78Ejmfd5Yl8ZWxwBPHAKX9PEQ+4hitzTug== |
| -----END CERTIFICATE----- |
