[Created by: ./generate-chains.py]

Certificate chain where the target certificate contains an
MSApplicationPolicies extension that is marked as critical and
does not contain an extendedKeyUsage extension.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c2:ac:ef:39:90:fd:0d:2e:ae:a2:26:22:5f:34:30:06:a4:a3:f3
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:dc:ef:39:2d:3e:82:ed:41:24:9b:af:4e:c7:37:
                    e2:c9:a9:47:32:16:5b:52:3f:82:14:63:bb:6e:b1:
                    cc:9d:a2:b4:df:90:42:73:14:c1:24:98:83:e5:58:
                    c4:bd:4c:0d:01:31:b4:c5:4e:a2:a4:e1:8f:ff:d8:
                    95:4a:7f:90:50:18:81:74:04:e0:29:82:d7:a8:be:
                    c7:b5:c8:43:93:31:99:33:04:7b:b1:3f:8c:77:44:
                    f3:66:85:93:10:88:79:f2:30:1d:a5:3a:78:82:ae:
                    bb:b4:21:2a:64:00:5b:42:07:04:b7:a0:fb:f0:4b:
                    74:e8:23:53:da:8e:0c:39:da:f2:b2:df:d3:88:91:
                    11:b5:60:68:26:8e:58:81:a3:d3:06:2a:e7:e0:df:
                    ba:8b:07:0f:d2:98:6c:6a:4b:54:9d:b6:34:e0:99:
                    c4:04:b8:02:04:ec:7d:e5:04:f2:4f:1e:50:38:d4:
                    f0:ca:c7:ca:e8:b3:93:d5:40:14:1b:77:25:45:38:
                    77:49:92:b4:41:fa:f4:3e:cc:d7:b2:35:72:94:67:
                    cf:76:e8:e3:9e:5a:67:d9:6d:44:e9:12:4c:40:f6:
                    56:b9:21:d7:51:4e:68:f5:5b:70:c4:9a:82:38:12:
                    e3:60:f3:dc:c3:90:e1:41:31:d5:db:8b:87:96:b6:
                    45:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                08:E2:C4:5E:E8:5A:C1:B2:5A:B5:7E:1C:A2:8B:FB:31:B2:94:58:70
            X509v3 Authority Key Identifier: 
                C9:C5:2E:C4:9B:E4:8A:91:4B:38:EF:9B:47:0E:C5:43:F2:B2:5E:9B
            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://url-for-crl/Intermediate.crl
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            1.3.6.1.4.1.311.21.10: critical
                ....
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        51:39:30:77:b2:7a:4c:83:f5:cb:ad:60:6f:73:cd:b9:35:1f:
        dd:a6:8c:da:43:37:65:42:41:95:a5:73:d6:3e:d7:d0:4f:a2:
        cd:8d:ee:35:1b:e2:b6:74:68:00:f0:ae:d5:45:75:6f:8f:d9:
        30:f3:10:1d:07:3e:d4:c4:43:39:aa:bd:8f:0c:b7:81:a7:b8:
        c5:e7:ad:61:24:a5:33:43:d8:1e:0a:a1:4c:82:61:69:56:0b:
        71:ae:48:7e:80:42:1a:6c:76:04:94:48:ca:0e:05:e1:76:39:
        4b:55:07:4a:bb:ff:3f:9a:48:aa:14:8a:69:ad:35:cd:af:32:
        2e:c2:6e:f3:5d:21:c1:a8:0c:45:af:1b:e5:e4:c5:12:66:ff:
        94:43:6d:9f:4b:c5:b5:7a:a7:4f:42:34:1f:ae:b7:60:dc:81:
        69:5f:23:74:17:52:28:e0:93:ce:d3:5b:83:14:f4:cf:87:d8:
        22:ac:af:d8:05:76:ba:0c:5e:73:ec:b6:12:74:6e:c6:92:be:
        f5:8f:2c:cc:7b:4e:b0:32:91:a1:ee:65:06:1c:a0:25:94:1c:
        ea:75:f4:50:e6:65:a9:74:ed:b3:f7:ba:7b:45:d7:e2:28:4b:
        3b:d3:66:c6:d9:7f:1d:1d:d7:cc:81:85:ed:0a:8d:f1:5c:c1:
        dc:eb:3b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:69:1e:f2:d2:50:52:75:0d:f7:2f:a6:37:4f:1c:8e:68:ba:05:14
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:97:4d:9e:0c:43:a9:0d:f0:5c:d4:7b:cf:3a:a0:
                    8b:01:6e:cb:30:1c:92:3b:b7:49:92:4b:36:7e:bb:
                    e3:e6:03:98:60:87:ba:52:12:98:9c:6b:e5:f4:6e:
                    98:46:8c:fc:c7:c2:af:c5:70:b3:be:bd:b9:ba:7e:
                    15:29:e3:34:96:2f:94:70:9f:70:35:a2:da:70:c8:
                    62:e0:30:78:5d:b6:81:ee:91:4a:cc:b4:65:62:f3:
                    1b:99:c2:65:8b:d5:79:3f:d6:86:e5:58:d5:60:ef:
                    27:0a:9c:80:a6:49:a2:d0:50:a6:ae:1f:e3:d4:e3:
                    63:4c:33:9d:ab:8e:b2:37:da:9a:7e:8b:36:c3:5f:
                    24:9b:b1:51:2b:2a:b4:fd:1f:2a:99:ee:21:71:c8:
                    61:65:1c:56:be:7f:91:46:49:15:82:08:50:54:15:
                    83:3f:ab:ef:0b:3d:87:ab:d3:82:2d:25:d2:2f:de:
                    82:95:b9:25:53:98:4a:16:b8:f8:d4:f7:26:9a:a8:
                    97:5e:15:ec:25:5c:fa:f6:2a:f5:2e:48:2c:11:2e:
                    b2:b4:5c:79:4a:c1:66:49:c6:3a:cd:fd:8b:e3:87:
                    f2:5f:99:3f:37:00:1e:22:64:86:0a:d0:fb:79:fa:
                    2e:e1:54:ac:38:ba:82:c6:bc:48:9c:5e:aa:a3:e9:
                    27:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C9:C5:2E:C4:9B:E4:8A:91:4B:38:EF:9B:47:0E:C5:43:F2:B2:5E:9B
            X509v3 Authority Key Identifier: 
                C9:1B:0A:27:43:C5:EF:E5:72:BC:94:85:D7:E5:F8:99:E1:50:24:8D
            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://url-for-crl/Root.crl
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        6f:9c:74:6f:bc:bd:6e:dc:06:00:4d:f0:a8:e3:e0:0d:56:82:
        09:94:bf:95:95:b9:a4:31:0c:8a:0f:19:55:e2:b7:d8:d3:c4:
        6f:55:b6:ae:19:77:39:4e:43:82:58:3f:7c:da:2a:8c:47:8c:
        b0:18:5e:d4:00:0c:af:2f:72:e5:40:aa:42:db:a4:7a:03:9d:
        f1:22:f1:c6:ac:cf:18:81:61:73:dd:00:29:63:fd:ca:5a:51:
        69:94:ab:c4:c8:c4:fc:ff:70:1d:a7:5e:11:03:c1:18:41:9b:
        92:e8:03:50:7d:fd:01:d9:32:bf:d5:68:4b:e2:90:88:7c:62:
        eb:9f:4b:36:4f:37:8d:63:a0:eb:fb:e5:32:bd:87:3f:4d:9a:
        4f:2c:8b:32:3f:c4:55:a5:d6:e3:cb:83:4a:5a:9e:9f:3d:ec:
        45:5c:d4:ec:5e:51:1d:eb:98:8c:b1:bb:be:5f:a5:0f:7c:75:
        b9:2b:a0:63:71:9c:42:76:fc:52:7d:01:54:8f:9c:1a:e0:4d:
        6b:7e:e7:84:6c:8e:af:87:6b:cd:aa:e0:08:1e:8b:7d:d6:e7:
        c8:7f:66:3f:ea:d3:2d:99:75:20:f6:8d:34:bd:f0:36:ea:4b:
        3b:70:f1:57:b7:c8:55:a4:11:9b:ce:17:18:21:03:d0:d5:02:
        12:25:23:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:69:1e:f2:d2:50:52:75:0d:f7:2f:a6:37:4f:1c:8e:68:ba:05:13
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Oct  5 12:00:00 2021 GMT
            Not After : Oct  5 12:00:00 2022 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:67:95:5f:5c:db:5a:55:2a:c8:09:cf:ed:
                    c9:1c:4c:38:f4:53:65:24:ec:f0:15:8d:fb:c5:1b:
                    42:fe:b1:59:1d:16:6b:7d:59:62:72:62:9c:b5:08:
                    c9:c7:f8:d3:02:29:0c:c1:9d:ff:1d:f7:e3:f3:bd:
                    33:08:05:ac:2a:52:46:48:f9:41:a7:9a:00:59:78:
                    68:17:6a:17:59:0b:b2:e7:3a:de:a7:2d:b4:19:76:
                    52:85:22:0c:d5:15:10:7c:a3:25:ca:75:ed:b5:74:
                    96:a0:f4:8d:0c:17:42:8e:44:c2:9a:53:ee:58:4a:
                    f3:0f:ec:c1:20:d9:f7:9b:07:13:b5:59:a7:8d:91:
                    5e:51:a8:12:7e:db:e9:ad:ec:da:e7:52:b5:2b:85:
                    7c:dd:77:8f:6f:6a:12:24:b7:f5:d7:74:7d:98:e9:
                    21:1c:21:ba:e7:fc:52:e4:8d:05:a7:1a:9f:98:a3:
                    76:6c:a5:3a:5a:a1:6b:ae:be:bc:25:a5:eb:c1:ad:
                    79:5c:d1:03:ca:c9:a6:d3:14:8d:f4:ed:28:6a:16:
                    9a:f7:48:32:9b:d2:93:c5:44:f3:23:b0:4b:ff:b1:
                    aa:06:d3:ba:4e:e4:e3:3d:29:e2:d4:39:05:49:ba:
                    1f:4d:f1:7a:c6:df:95:45:bd:07:34:c2:13:14:6c:
                    6c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C9:1B:0A:27:43:C5:EF:E5:72:BC:94:85:D7:E5:F8:99:E1:50:24:8D
            X509v3 Authority Key Identifier: 
                C9:1B:0A:27:43:C5:EF:E5:72:BC:94:85:D7:E5:F8:99:E1:50:24:8D
            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://url-for-crl/Root.crl
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        7e:aa:d8:8d:d4:41:51:cf:31:32:fb:1d:02:85:65:63:ca:15:
        1d:03:de:f5:9e:21:15:d0:6c:df:f8:13:ea:54:09:d9:4a:bb:
        28:3c:bc:a1:82:b4:86:c6:05:42:73:ce:7d:4e:a1:15:b5:20:
        bc:d8:d7:45:71:cc:f0:7e:77:c9:41:b9:2d:dd:43:a8:54:a5:
        02:d5:eb:6d:af:9b:40:bd:74:28:8e:76:8d:c6:b0:7d:c7:d5:
        fe:7e:ec:7f:5a:a9:1e:81:a1:c7:bd:86:b3:fa:8d:09:c7:3e:
        6c:a9:fd:45:8e:c4:2b:ff:3e:9d:49:0b:aa:9e:a7:9e:1c:e0:
        d2:4c:56:db:4c:f9:9b:93:09:0e:51:57:11:20:7d:6a:fb:c3:
        57:b9:35:23:3c:4f:39:38:e1:d2:e6:39:d9:2b:9c:1a:1b:42:
        c7:11:a3:cc:b8:19:5e:fb:93:e8:27:38:95:fb:d3:00:ee:19:
        30:5a:5e:38:0f:42:fe:58:2b:f9:e2:3e:66:2f:5b:54:5c:23:
        29:83:09:d2:62:7d:96:a1:16:b9:6c:c7:54:66:77:5b:18:2a:
        dd:af:fb:fa:01:16:fc:7d:4c:16:77:e2:60:2c:7b:4f:c3:db:
        72:a1:e0:cf:6e:31:28:1e:9a:15:7f:a8:25:2b:a6:b0:e3:0c:
        7a:8a:91:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----