[Created by: generate-chains.py]

Certificate chain where the intermediate has a basic constraints extension
that indicates it is NOT a CA.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:89:40:ce:2b:53:75:88:ff:8e:84:70:5e:89:c5:8b:d1:5c:22:c2
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:6b:47:00:ed:9a:72:03:1f:bc:14:42:63:
                    28:8d:c9:5a:08:27:59:06:2e:61:d9:28:aa:ed:58:
                    17:5f:f2:bf:ee:33:ab:74:0b:1c:c3:00:b6:38:96:
                    96:d0:dc:91:44:ab:1d:fa:e5:99:ed:fe:ee:43:dd:
                    21:b0:b8:1a:31:70:bb:c6:a5:eb:6e:2e:79:cf:c3:
                    c9:32:f7:39:e5:ff:9f:1e:fd:c8:8c:8f:9d:42:e6:
                    5d:cc:b1:75:fa:94:f3:f8:df:f8:47:ea:7a:4f:4c:
                    1d:67:fd:37:2e:75:a3:13:84:00:92:c5:6c:86:66:
                    80:39:7b:0f:2e:af:14:ce:82:1c:e4:78:7b:f3:d8:
                    f4:b3:b1:d1:7d:5f:ed:19:6f:1d:eb:7e:be:3a:33:
                    e1:b4:86:82:22:05:28:87:85:b8:2b:70:f1:88:45:
                    6b:b4:fb:d0:f0:0a:e5:45:f6:a8:e2:18:88:74:56:
                    4c:a7:4b:cb:13:8e:61:8b:1a:c2:a2:2b:2d:24:7a:
                    f0:4c:53:49:8b:98:be:52:31:72:5d:38:e7:8d:36:
                    7b:bb:34:4d:66:2d:b3:8b:82:85:9f:e6:f9:d8:58:
                    da:0d:e9:d5:d2:be:53:4b:88:ad:58:8a:3b:3c:1d:
                    53:60:ed:15:50:9c:fd:c3:bf:0c:fc:56:02:8f:06:
                    ab:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                69:F2:C8:4F:15:5E:61:18:40:61:41:B1:88:18:21:B5:77:6F:F9:DE
            X509v3 Authority Key Identifier: 
                keyid:AF:9B:3A:70:86:45:08:AD:02:CD:FC:FD:46:48:82:7D:46:63:31:DB

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         81:4c:16:39:06:21:f4:37:69:aa:a6:28:f9:7f:e4:66:af:a6:
         7a:fb:8f:24:7d:5b:f4:97:0f:78:ae:e0:19:e4:ac:96:01:5b:
         83:d4:90:dc:3d:95:e9:37:fb:f0:8b:cb:a1:4b:26:3a:91:ae:
         0f:7e:ad:47:e7:54:e7:92:60:7c:d8:c3:ba:39:0e:1f:f7:43:
         65:2e:cd:4b:33:5b:8c:30:65:4b:a3:13:da:4f:80:bb:5e:a0:
         2d:a7:6e:6a:4b:e7:28:36:da:5c:5e:ec:a8:2b:0b:57:e6:74:
         d7:a0:10:7a:00:76:e9:3a:1e:7b:b0:a7:89:48:51:aa:c6:de:
         8f:cc:2f:fc:29:6d:f6:fb:7f:97:bc:4e:1a:0f:f4:72:52:21:
         e5:70:26:9e:fa:95:50:20:35:68:db:ac:5c:04:1b:47:c5:e7:
         c6:07:3b:5f:e6:39:f2:1e:d1:66:c5:80:7e:84:cb:b3:c1:21:
         0a:a0:ee:aa:1b:9e:4c:b6:00:bf:6b:98:bf:8a:8d:a2:8f:a7:
         e4:98:6b:de:ad:f4:da:fe:54:13:99:1d:ec:c9:71:53:ba:c7:
         8d:41:42:ca:8e:3e:a1:16:d2:c0:01:af:98:d6:66:6f:83:42:
         fe:c2:3e:c4:71:78:e9:00:04:47:20:1e:8c:83:c8:92:28:8a:
         a7:a0:28:4c
-----BEGIN CERTIFICATE-----
MIIDoDCCAoigAwIBAgIUXYlAzitTdYj/joRwXonFi9FcIsIwDQYJKoZIhvcNAQEL
BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTIxMTAwNTEyMDAwMFoXDTIy
MTAwNTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAltRrRwDtmnIDH7wUQmMojclaCCdZBi5h2Siq7VgXX/K/
7jOrdAscwwC2OJaW0NyRRKsd+uWZ7f7uQ90hsLgaMXC7xqXrbi55z8PJMvc55f+f
Hv3IjI+dQuZdzLF1+pTz+N/4R+p6T0wdZ/03LnWjE4QAksVshmaAOXsPLq8UzoIc
5Hh789j0s7HRfV/tGW8d636+OjPhtIaCIgUoh4W4K3DxiEVrtPvQ8ArlRfao4hiI
dFZMp0vLE45hixrCoistJHrwTFNJi5i+UjFyXTjnjTZ7uzRNZi2zi4KFn+b52Fja
DenV0r5TS4itWIo7PB1TYO0VUJz9w78M/FYCjwarnQIDAQABo4HpMIHmMB0GA1Ud
DgQWBBRp8shPFV5hGEBhQbGIGCG1d2/53jAfBgNVHSMEGDAWgBSvmzpwhkUIrQLN
/P1GSIJ9RmMx2zA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91
cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0
dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD
ggEBAIFMFjkGIfQ3aaqmKPl/5Gavpnr7jyR9W/SXD3iu4BnkrJYBW4PUkNw9lek3
+/CLy6FLJjqRrg9+rUfnVOeSYHzYw7o5Dh/3Q2UuzUszW4wwZUujE9pPgLteoC2n
bmpL5yg22lxe7KgrC1fmdNegEHoAduk6Hnuwp4lIUarG3o/ML/wpbfb7f5e8ThoP
9HJSIeVwJp76lVAgNWjbrFwEG0fF58YHO1/mOfIe0WbFgH6Ey7PBIQqg7qobnky2
AL9rmL+KjaKPp+SYa96t9Nr+VBOZHezJcVO6x41BQsqOPqEW0sABr5jWZm+DQv7C
PsRxeOkABEcgHoyDyJIoiqegKEw=
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d2:b9:cc:38:a5:71:aa:e1:ce:1e:c1:8b:50:10:aa:15:44:3f:ba
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:78:c1:e7:a0:b7:63:87:52:e4:d4:11:71:
                    3e:cb:65:9c:d9:2f:cb:48:30:8e:62:29:ae:c9:22:
                    36:a6:67:d2:ea:10:58:d2:82:ab:bc:1e:a3:12:64:
                    6e:fd:79:af:2e:6c:c0:8b:fd:36:68:ea:e0:0a:09:
                    53:99:89:75:92:61:13:ac:aa:d9:e2:f1:ac:93:72:
                    94:65:99:9e:52:9d:8f:6d:1e:b1:3e:83:fb:fa:c4:
                    dd:b4:b3:d2:0b:bb:f8:21:10:a9:51:8e:9e:b4:c8:
                    a8:63:79:50:62:03:59:3f:53:19:02:7c:a4:d9:45:
                    dd:07:b7:76:89:ac:ac:6f:b1:1d:aa:8c:4a:e5:40:
                    a2:05:32:2f:ba:a8:a9:8a:f3:eb:f0:f3:d9:9e:97:
                    e6:89:42:dd:95:67:de:33:62:2c:10:59:0b:b6:de:
                    9a:3e:54:10:b8:a4:a9:33:05:4d:fc:ea:8b:56:38:
                    2a:11:88:cd:75:1f:74:ea:4e:ad:3c:ef:da:d4:00:
                    72:57:1c:16:d3:20:b6:99:cc:7f:aa:58:fa:48:e8:
                    e9:a9:bd:00:2e:87:ce:39:9b:1c:17:23:ac:28:55:
                    77:81:e7:ac:f6:d6:6d:77:27:fb:e7:a0:22:72:58:
                    83:4d:1a:1a:be:b6:00:8e:d1:11:c7:71:28:93:09:
                    74:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AF:9B:3A:70:86:45:08:AD:02:CD:FC:FD:46:48:82:7D:46:63:31:DB
            X509v3 Authority Key Identifier: 
                keyid:6C:B8:FE:A6:74:44:97:70:ED:FE:CB:24:38:90:2A:A9:61:48:FB:EB

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
         49:b5:b7:cf:f6:1f:c2:b8:de:b0:18:55:84:5b:30:90:ab:2b:
         f6:19:57:db:34:dc:65:9b:50:b7:7d:f9:a3:2e:3f:60:ff:de:
         7e:8d:a3:20:c3:ee:0c:b2:b2:f0:68:ab:93:c3:f4:3d:ec:da:
         54:86:4a:c0:0a:5e:e9:c3:bf:4b:cd:1a:28:8e:b3:1f:b5:5b:
         ce:d6:fc:1d:cc:7b:8d:a6:31:a7:ef:43:4c:3d:3c:d9:17:e0:
         3f:23:ca:1f:d6:cd:d2:ce:da:f3:a7:c8:f3:3b:ab:c9:e1:c1:
         56:37:f7:79:0f:ae:ad:52:43:35:95:8d:34:a4:d7:e0:21:a7:
         f0:37:63:c3:63:8a:d3:ce:50:ff:e1:0d:30:6b:b3:75:e1:5d:
         43:31:9f:3a:b5:59:cd:aa:7a:06:bc:4b:4d:74:ed:59:ac:fc:
         bc:4a:4e:a1:be:1e:2d:12:70:6e:36:e9:4e:5a:11:19:91:85:
         da:b2:54:ec:9d:9a:2b:cd:c1:7e:7c:18:fd:ae:a2:9c:b2:17:
         68:8a:43:b2:25:16:a9:7b:bf:42:ed:fd:54:cb:84:f1:40:76:
         54:a4:3a:62:1e:f9:98:2a:ff:37:66:bf:05:1f:b7:55:7d:8b:
         03:e8:a3:12:b3:40:78:52:77:62:aa:71:2b:cb:86:50:d1:83:
         08:bd:b8:50
-----BEGIN CERTIFICATE-----
MIIDfTCCAmWgAwIBAgIUXtK5zDilcarhzh7Bi1AQqhVEP7owDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0yMTEwMDUxMjAwMDBaFw0yMjEwMDUxMjAw
MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMICeMHnoLdjh1Lk1BFxPstlnNkvy0gwjmIprskiNqZn0uoQ
WNKCq7weoxJkbv15ry5swIv9Nmjq4AoJU5mJdZJhE6yq2eLxrJNylGWZnlKdj20e
sT6D+/rE3bSz0gu7+CEQqVGOnrTIqGN5UGIDWT9TGQJ8pNlF3Qe3domsrG+xHaqM
SuVAogUyL7qoqYrz6/Dz2Z6X5olC3ZVn3jNiLBBZC7bemj5UELikqTMFTfzqi1Y4
KhGIzXUfdOpOrTzv2tQAclccFtMgtpnMf6pY+kjo6am9AC6HzjmbHBcjrChVd4Hn
rPbWbXcn++egInJYg00aGr62AI7REcdxKJMJdHsCAwEAAaOByDCBxTAdBgNVHQ4E
FgQUr5s6cIZFCK0Czfz9RkiCfUZjMdswHwYDVR0jBBgwFoAUbLj+pnREl3Dt/ssk
OJAqqWFI++swNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs
LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m
b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAMBgNVHRMBAf8EAjAAMA0G
CSqGSIb3DQEBCwUAA4IBAQBJtbfP9h/CuN6wGFWEWzCQqyv2GVfbNNxlm1C3ffmj
Lj9g/95+jaMgw+4MsrLwaKuTw/Q97NpUhkrACl7pw79LzRoojrMftVvO1vwdzHuN
pjGn70NMPTzZF+A/I8of1s3Sztrzp8jzO6vJ4cFWN/d5D66tUkM1lY00pNfgIafw
N2PDY4rTzlD/4Q0wa7N14V1DMZ86tVnNqnoGvEtNdO1ZrPy8Sk6hvh4tEnBuNulO
WhEZkYXaslTsnZorzcF+fBj9rqKcshdoikOyJRape79C7f1Uy4TxQHZUpDpiHvmY
Kv83Zr8FH7dVfYsD6KMSs0B4UndiqnEry4ZQ0YMIvbhQ
-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d2:b9:cc:38:a5:71:aa:e1:ce:1e:c1:8b:50:10:aa:15:44:3f:b9
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:06:fa:a6:03:d1:64:c6:fa:62:8c:f6:40:
                    93:be:4e:7d:71:8b:3c:fb:57:b2:64:7a:08:9d:ce:
                    c3:40:ff:eb:84:43:e9:0c:e0:80:2c:e3:9c:38:43:
                    90:9d:e1:a5:4e:a1:10:9f:ac:b4:bf:24:38:7a:d7:
                    37:21:0d:ae:de:f0:99:37:43:6a:e7:7f:d0:4a:ba:
                    d3:a4:f4:df:ce:fa:d1:b0:03:f9:5d:79:a5:c5:82:
                    b0:cf:62:02:87:84:ec:73:d2:65:33:86:02:d7:f4:
                    57:8d:98:a2:2a:8f:89:c6:23:29:68:ff:56:46:d2:
                    dc:9a:e3:d2:24:d8:e9:fe:18:0c:4f:67:b3:cd:5e:
                    31:4a:70:2e:4c:b2:7e:10:e1:38:c7:a1:fa:bc:8f:
                    9b:23:e9:19:56:c5:38:4a:e8:7d:31:e2:6e:03:70:
                    ce:f2:0b:52:7d:6d:d7:d7:53:d8:e0:1c:6e:95:f3:
                    1c:b6:04:50:03:23:39:86:42:28:68:26:5f:ca:a7:
                    13:e2:51:ed:f0:55:bb:ac:4e:9d:cf:e5:07:44:41:
                    45:f8:5c:65:cf:d7:7f:0a:e0:ee:5e:5e:2c:0c:13:
                    10:f6:d4:e3:ba:9f:16:f4:8c:85:b2:53:4c:e1:56:
                    63:f0:08:11:84:df:dc:e1:a0:7f:fb:78:5d:eb:21:
                    f9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6C:B8:FE:A6:74:44:97:70:ED:FE:CB:24:38:90:2A:A9:61:48:FB:EB
            X509v3 Authority Key Identifier: 
                keyid:6C:B8:FE:A6:74:44:97:70:ED:FE:CB:24:38:90:2A:A9:61:48:FB:EB

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         0f:63:30:43:fc:d4:2f:ab:61:22:7e:19:62:9c:64:a4:5c:98:
         b8:bd:d3:04:be:06:be:6d:7d:2f:a5:f8:c1:5d:29:90:fe:9a:
         fb:e2:08:58:7f:60:ba:e8:63:a1:17:90:88:3b:35:1e:92:98:
         37:2a:79:4a:db:1b:23:07:c3:75:82:90:1b:97:1b:4e:e1:40:
         a8:74:99:03:72:de:05:46:f5:4b:f2:ab:00:4f:27:e7:e8:c3:
         95:d9:ba:63:f0:42:99:ec:61:44:1a:03:e5:6d:58:28:c2:f9:
         8a:36:6d:10:fc:d4:4e:91:38:91:7b:4c:e2:69:e1:1b:c2:c9:
         51:50:cf:13:08:66:d1:27:5b:0d:c1:f0:fd:70:4e:63:17:0e:
         53:2b:36:72:18:b2:a1:fc:fc:e8:21:e3:15:2b:39:e3:01:18:
         11:52:c8:0e:20:e7:29:ae:2f:35:4e:dd:2a:f6:12:cd:55:38:
         89:f3:2a:11:43:d7:33:c2:47:c1:c7:78:f4:d0:a0:5a:cb:ec:
         86:88:5d:5d:54:d2:b2:0d:cb:5c:0e:05:28:80:e8:8c:09:45:
         1e:66:44:f7:6c:b4:07:a3:4e:8e:8c:33:38:c5:de:10:1f:f8:
         1e:a9:12:3b:f2:18:d8:84:95:79:50:66:49:49:58:b5:e0:89:
         9a:ac:59:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----