| [Created by: generate-target-signed-with-md5.py] |
| |
| Certificate chain with an intermediate that uses MD5 to sign the target |
| certificate. This is expected to fail because MD5 is too weak. |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 1 (0x1) |
| Signature Algorithm: md5WithRSAEncryption |
| Issuer: CN=Intermediate |
| Validity |
| Not Before: Jan 1 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2016 GMT |
| Subject: CN=Target |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:bc:8a:b8:3e:5c:f9:f0:cc:33:10:6f:ab:ec:81: |
| 53:1c:4f:d3:c7:e2:c6:ac:57:9b:b0:a1:37:3d:2a: |
| b8:4f:eb:23:8b:64:6d:2f:5b:f5:02:dc:5b:d5:11: |
| ea:29:38:4c:76:40:f4:b0:b0:47:9f:6c:8d:89:91: |
| f4:0d:e5:cb:bb:c2:2a:cc:c1:9b:3a:56:f6:26:8e: |
| 4a:df:2c:b3:7c:35:3f:71:a9:37:49:3c:1a:40:fd: |
| 5e:6f:1b:5e:a0:61:64:d1:40:80:d7:dd:2b:d4:32: |
| 4c:80:f8:5a:8c:b2:ff:b6:ea:91:73:59:00:5e:02: |
| a8:49:1b:2b:fa:c2:9b:35:44:79:74:7b:02:8e:68: |
| 47:76:43:8d:23:d0:d0:f9:c4:8c:a1:aa:99:cb:55: |
| 24:a1:11:1c:88:0d:8a:5c:d9:46:a6:8f:ac:3f:83: |
| e3:4e:35:90:03:fe:0e:2d:d7:c6:9b:a3:36:d7:7f: |
| af:32:89:83:94:40:e7:87:1b:fe:f5:1b:1e:75:ba: |
| f2:b5:70:f3:75:f8:85:b3:58:9d:5f:56:6b:60:0f: |
| 53:12:82:dc:01:67:28:66:2c:3e:f6:df:08:fb:b9: |
| da:ce:00:60:b3:b4:65:fd:1d:1e:14:7c:90:9b:0b: |
| d4:ca:ff:96:12:c0:2c:cd:fb:c3:4f:62:d0:67:59: |
| bc:71 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 2F:67:2E:92:9E:39:55:C4:47:23:6A:10:A9:37:87:97:74:0F:55:57 |
| X509v3 Authority Key Identifier: |
| keyid:A7:A7:7E:EF:32:C8:D1:7C:DF:CA:EE:F4:4F:7A:EA:67:43:53:57:CF |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Intermediate.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Intermediate.crl |
| |
| X509v3 Key Usage: critical |
| Digital Signature, Key Encipherment |
| X509v3 Extended Key Usage: |
| TLS Web Server Authentication, TLS Web Client Authentication |
| Signature Algorithm: md5WithRSAEncryption |
| 30:9f:40:ac:31:10:78:0f:06:4b:ed:6d:de:05:20:c6:29:64: |
| 66:a8:2a:4d:ac:b3:3d:40:d5:70:80:24:08:13:00:73:0b:90: |
| 32:c3:fe:35:b3:8c:77:bb:d6:79:a9:84:e3:76:89:d9:0f:19: |
| 2e:68:6a:ec:09:ef:9c:57:32:ee:9f:e5:0e:5e:4c:6b:87:eb: |
| e0:7b:e9:ed:b0:db:ef:34:7a:41:aa:7b:0d:b7:37:89:17:99: |
| b8:43:db:93:19:30:91:7c:25:fe:1d:cd:69:02:b8:6d:c6:08: |
| fa:7f:d8:3c:e5:9a:9d:fd:af:13:53:5a:54:a7:5d:d1:e3:46: |
| 3a:c9:8b:ac:e3:cb:e8:67:a8:e0:cf:bb:ab:45:5c:d6:d5:51: |
| d2:2a:d2:b2:f8:3f:05:d2:20:e8:95:17:7d:43:fe:af:cd:1c: |
| fa:d2:8f:8f:3b:b1:2b:3d:22:06:d8:c7:0d:00:64:8a:35:40: |
| 32:6e:2c:07:be:5f:e7:9d:06:4f:b1:99:a9:fb:2e:03:80:79: |
| 5e:19:60:a9:7f:e5:12:bb:ba:a8:f2:34:d7:00:29:11:ab:8d: |
| 51:52:67:33:99:5c:08:de:85:a6:ea:42:9d:08:76:d1:f1:23: |
| fa:c0:4c:ff:38:5a:de:1b:7a:16:e7:79:cf:a0:d0:2f:b7:e5: |
| d4:8e:92:4f |
| -----BEGIN CERTIFICATE----- |
| MIIDjTCCAnWgAwIBAgIBATANBgkqhkiG9w0BAQQFADAXMRUwEwYDVQQDDAxJbnRl |
| cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTYwMTAxMTIwMDAwWjARMQ8wDQYD |
| VQQDDAZUYXJnZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8irg+ |
| XPnwzDMQb6vsgVMcT9PH4sasV5uwoTc9KrhP6yOLZG0vW/UC3FvVEeopOEx2QPSw |
| sEefbI2JkfQN5cu7wirMwZs6VvYmjkrfLLN8NT9xqTdJPBpA/V5vG16gYWTRQIDX |
| 3SvUMkyA+FqMsv+26pFzWQBeAqhJGyv6wps1RHl0ewKOaEd2Q40j0ND5xIyhqpnL |
| VSShERyIDYpc2Uamj6w/g+NONZAD/g4t18abozbXf68yiYOUQOeHG/71Gx51uvK1 |
| cPN1+IWzWJ1fVmtgD1MSgtwBZyhmLD723wj7udrOAGCztGX9HR4UfJCbC9TK/5YS |
| wCzN+8NPYtBnWbxxAgMBAAGjgekwgeYwHQYDVR0OBBYEFC9nLpKeOVXERyNqEKk3 |
| h5d0D1VXMB8GA1UdIwQYMBaAFKenfu8yyNF838ru9E966mdDU1fPMD8GCCsGAQUF |
| BwEBBDMwMTAvBggrBgEFBQcwAoYjaHR0cDovL3VybC1mb3ItYWlhL0ludGVybWVk |
| aWF0ZS5jZXIwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL3VybC1mb3ItY3JsL0lu |
| dGVybWVkaWF0ZS5jcmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF |
| BwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQQFAAOCAQEAMJ9ArDEQeA8GS+1t3gUg |
| xilkZqgqTayzPUDVcIAkCBMAcwuQMsP+NbOMd7vWeamE43aJ2Q8ZLmhq7AnvnFcy |
| 7p/lDl5Ma4fr4Hvp7bDb7zR6Qap7Dbc3iReZuEPbkxkwkXwl/h3NaQK4bcYI+n/Y |
| POWanf2vE1NaVKdd0eNGOsmLrOPL6Geo4M+7q0Vc1tVR0irSsvg/BdIg6JUXfUP+ |
| r80c+tKPjzuxKz0iBtjHDQBkijVAMm4sB75f550GT7GZqfsuA4B5XhlgqX/lEru6 |
| qPI01wApEauNUVJnM5lcCN6FpupCnQh20fEj+sBM/zha3ht6Fud5z6DQL7fl1I6S |
| Tw== |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 2 (0x2) |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Jan 1 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2016 GMT |
| Subject: CN=Intermediate |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:b1:0a:34:0b:b1:d9:65:b5:ea:7a:ac:f5:96:11: |
| 68:ba:f0:c9:6b:57:c7:97:7e:f4:bb:5d:31:4e:43: |
| 9b:04:7f:a7:2e:fd:4c:e0:03:c7:0d:ac:70:24:0e: |
| bc:26:a2:5d:48:71:04:9b:43:8c:97:e4:2c:df:7c: |
| 59:39:eb:a3:94:b3:5b:87:d5:11:b6:c1:4a:e9:7b: |
| e8:f8:c5:31:3b:2c:4d:f0:47:34:75:a8:88:6d:22: |
| a9:24:dc:00:1f:a0:36:1e:e3:a7:92:b1:00:9d:f8: |
| ef:27:46:63:60:23:67:48:e6:5d:66:b3:3d:b6:84: |
| 04:3f:b1:1b:2f:b7:8e:71:26:28:32:ff:de:fa:b0: |
| cb:e2:90:5a:72:9a:83:1d:de:c7:ad:b1:5d:68:11: |
| 9e:6a:ac:44:6b:06:cc:93:6c:a9:13:af:a4:72:e2: |
| 34:4d:c4:d7:8f:ee:99:f4:e4:db:d1:19:45:bf:97: |
| 76:59:7d:b9:32:63:07:a0:1c:e3:19:98:f6:aa:d8: |
| ba:44:f6:ec:5f:eb:46:d1:63:70:56:00:a1:f1:ce: |
| 18:c3:a5:77:27:81:e6:18:65:78:9a:c4:87:f9:36: |
| 2e:b6:fc:5c:75:a9:a9:59:6a:df:99:26:07:c9:1d: |
| 1a:a8:4f:6e:b6:10:92:4f:96:c1:74:30:4a:5c:8b: |
| bd:7b |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| A7:A7:7E:EF:32:C8:D1:7C:DF:CA:EE:F4:4F:7A:EA:67:43:53:57:CF |
| X509v3 Authority Key Identifier: |
| keyid:7F:7A:CD:B2:58:B8:B5:62:1A:C2:DE:B4:6B:B5:74:E9:B8:DC:77:87 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 96:e8:cf:14:ab:83:41:2e:62:24:7e:03:ad:0e:ae:8e:6a:93: |
| ed:3d:86:68:84:b5:76:2b:88:c3:67:b6:15:b6:38:b2:27:f3: |
| 2a:1b:83:42:60:11:ee:94:ba:d8:d8:35:74:92:c1:5f:b4:b3: |
| f0:fc:5e:eb:51:93:be:00:11:79:db:94:86:0f:19:26:bb:f6: |
| b1:ec:93:66:34:df:3e:7e:6e:80:17:3e:4a:9b:53:04:05:22: |
| 88:de:65:e3:50:c1:81:fa:1d:fc:76:09:f6:25:89:9d:4f:d3: |
| ff:76:b0:3e:81:d3:79:8f:05:48:68:36:93:43:ac:b8:41:37: |
| 98:54:bc:71:90:ed:12:c0:1f:f7:b4:a7:7b:56:34:e3:97:01: |
| 41:56:9a:c6:37:3f:8e:34:9b:51:37:77:4f:67:d6:72:66:d1: |
| 89:64:10:80:5f:13:15:34:03:a9:c5:6e:07:6c:77:78:99:27: |
| f4:e0:44:0e:5f:a0:67:dd:f7:4d:4a:93:b3:71:d2:8e:1b:d6: |
| 29:5a:8f:f1:f7:c8:9c:33:ae:28:15:7b:10:ee:92:bd:d5:3c: |
| b3:81:5a:52:5d:96:43:ae:bd:03:83:36:e8:c5:f8:23:03:26: |
| eb:2f:70:4a:bb:d8:e1:6a:a0:7d:23:b1:4f:32:28:65:23:84: |
| 02:95:8e:2d |
| -----BEGIN CERTIFICATE----- |
| MIIDbTCCAlWgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50 |
| ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQo0C7HZ |
| ZbXqeqz1lhFouvDJa1fHl370u10xTkObBH+nLv1M4APHDaxwJA68JqJdSHEEm0OM |
| l+Qs33xZOeujlLNbh9URtsFK6Xvo+MUxOyxN8Ec0daiIbSKpJNwAH6A2HuOnkrEA |
| nfjvJ0ZjYCNnSOZdZrM9toQEP7EbL7eOcSYoMv/e+rDL4pBacpqDHd7HrbFdaBGe |
| aqxEawbMk2ypE6+kcuI0TcTXj+6Z9OTb0RlFv5d2WX25MmMHoBzjGZj2qti6RPbs |
| X+tG0WNwVgCh8c4Yw6V3J4HmGGV4msSH+TYutvxcdampWWrfmSYHyR0aqE9uthCS |
| T5bBdDBKXIu9ewIDAQABo4HLMIHIMB0GA1UdDgQWBBSnp37vMsjRfN/K7vRPeupn |
| Q1NXzzAfBgNVHSMEGDAWgBR/es2yWLi1YhrC3rRrtXTpuNx3hzA3BggrBgEFBQcB |
| AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs |
| BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD |
| VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB |
| AJbozxSrg0EuYiR+A60Oro5qk+09hmiEtXYriMNnthW2OLIn8yobg0JgEe6UutjY |
| NXSSwV+0s/D8XutRk74AEXnblIYPGSa79rHsk2Y03z5+boAXPkqbUwQFIojeZeNQ |
| wYH6Hfx2CfYliZ1P0/92sD6B03mPBUhoNpNDrLhBN5hUvHGQ7RLAH/e0p3tWNOOX |
| AUFWmsY3P440m1E3d09n1nJm0YlkEIBfExU0A6nFbgdsd3iZJ/TgRA5foGfd901K |
| k7Nx0o4b1ilaj/H3yJwzrigVexDukr3VPLOBWlJdlkOuvQODNujF+CMDJusvcEq7 |
| 2OFqoH0jsU8yKGUjhAKVji0= |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: 1 (0x1) |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Jan 1 12:00:00 2015 GMT |
| Not After : Jan 1 12:00:00 2016 GMT |
| Subject: CN=Root |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:a7:f5:bd:ee:ad:ff:30:37:e6:5a:68:20:1a:22: |
| b1:f5:bb:5e:24:38:bd:b7:c1:34:d4:97:8b:16:97: |
| 34:17:bc:61:df:ff:ff:6b:9c:b6:34:79:7d:5a:e7: |
| 3b:cf:07:73:b8:2d:03:59:56:68:4a:85:25:58:f4: |
| 68:01:61:84:52:99:2f:6a:7e:cb:13:61:8b:6e:3b: |
| f5:8e:c2:48:cc:1e:50:28:4f:5f:4b:6b:32:d3:f3: |
| 76:c9:6f:a3:aa:40:1b:06:59:19:cd:42:70:f4:85: |
| fe:86:38:ca:84:42:5f:bb:d3:a7:41:42:46:59:14: |
| 3f:11:1d:62:d9:e1:16:3f:06:a7:59:f3:ff:ba:f1: |
| 88:7b:0c:68:10:49:ac:8d:75:87:08:94:f6:ec:ce: |
| 4c:6d:e6:77:85:25:c8:8f:42:0a:1d:d3:00:cc:89: |
| 31:dc:32:07:d7:2e:62:16:73:8b:5d:c4:c9:1b:87: |
| 7c:46:64:2d:cc:e0:fb:69:d2:e1:bd:23:2b:d9:15: |
| 62:22:a4:cd:75:64:f1:78:76:cc:07:11:59:08:60: |
| 03:dd:cb:67:3e:a7:b8:12:fa:96:54:6f:6d:9f:05: |
| 11:89:71:13:50:94:bb:bb:17:7e:80:ed:40:b1:ba: |
| f2:36:2d:45:bb:73:78:5e:b7:5e:2f:e7:f8:66:ec: |
| 1f:17 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 7F:7A:CD:B2:58:B8:B5:62:1A:C2:DE:B4:6B:B5:74:E9:B8:DC:77:87 |
| X509v3 Authority Key Identifier: |
| keyid:7F:7A:CD:B2:58:B8:B5:62:1A:C2:DE:B4:6B:B5:74:E9:B8:DC:77:87 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| a6:5d:56:c1:c7:29:8f:3a:1d:86:2c:5f:1e:ff:83:7a:c0:44: |
| 81:81:f7:16:9d:84:70:66:f8:1a:f4:8e:50:a7:dd:d2:1a:2e: |
| f9:6e:cc:e6:39:7c:fb:7e:29:54:24:3d:4a:82:e1:a5:d6:7e: |
| 4c:c8:58:b8:d6:f7:d2:90:ca:d9:8f:e9:c8:59:bc:73:1c:37: |
| 19:7c:a4:2b:ec:68:de:e9:04:fa:14:f0:07:bd:2f:3f:16:a4: |
| 50:8f:e8:89:ea:c1:31:d1:ce:6e:b1:21:11:5b:69:dc:28:e7: |
| 8a:33:8d:40:52:f8:86:8e:b0:a1:7a:a5:46:f2:8d:d7:d1:2e: |
| c8:2f:0f:ac:20:38:25:d6:4e:b2:72:fc:88:f3:47:93:bc:ec: |
| 47:0c:1c:cf:22:65:40:04:70:15:fa:79:ec:09:a2:69:a9:09: |
| 78:f7:3e:84:f3:7f:fa:a2:11:ad:45:72:5d:9d:55:58:fa:b1: |
| c6:67:4e:41:b4:bd:88:a0:e2:55:ae:26:3a:72:78:3d:e4:ab: |
| ad:f7:83:69:24:cd:22:4f:2e:23:a1:05:19:bd:57:d3:e8:b3: |
| 3d:9f:bd:ed:0b:95:bf:e5:47:8f:da:dd:9d:6b:27:61:bd:49: |
| 15:9c:9d:6b:40:2b:54:5f:3f:56:d5:08:29:6c:46:49:2d:3f: |
| d1:91:ff:f8 |
| -----BEGIN TRUST_ANCHOR_UNCONSTRAINED----- |
| MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290 |
| MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v |
| dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKf1ve6t/zA35lpoIBoi |
| sfW7XiQ4vbfBNNSXixaXNBe8Yd///2uctjR5fVrnO88Hc7gtA1lWaEqFJVj0aAFh |
| hFKZL2p+yxNhi2479Y7CSMweUChPX0trMtPzdslvo6pAGwZZGc1CcPSF/oY4yoRC |
| X7vTp0FCRlkUPxEdYtnhFj8Gp1nz/7rxiHsMaBBJrI11hwiU9uzOTG3md4UlyI9C |
| Ch3TAMyJMdwyB9cuYhZzi13EyRuHfEZkLczg+2nS4b0jK9kVYiKkzXVk8Xh2zAcR |
| WQhgA93LZz6nuBL6llRvbZ8FEYlxE1CUu7sXfoDtQLG68jYtRbtzeF63Xi/n+Gbs |
| HxcCAwEAAaOByzCByDAdBgNVHQ4EFgQUf3rNsli4tWIawt60a7V06bjcd4cwHwYD |
| VR0jBBgwFoAUf3rNsli4tWIawt60a7V06bjcd4cwNwYIKwYBBQUHAQEEKzApMCcG |
| CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw |
| IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE |
| AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCmXVbBxymP |
| Oh2GLF8e/4N6wESBgfcWnYRwZvga9I5Qp93SGi75bszmOXz7filUJD1KguGl1n5M |
| yFi41vfSkMrZj+nIWbxzHDcZfKQr7Gje6QT6FPAHvS8/FqRQj+iJ6sEx0c5usSER |
| W2ncKOeKM41AUviGjrCheqVG8o3X0S7ILw+sIDgl1k6ycvyI80eTvOxHDBzPImVA |
| BHAV+nnsCaJpqQl49z6E83/6ohGtRXJdnVVY+rHGZ05BtL2IoOJVriY6cng95Kut |
| 94NpJM0iTy4joQUZvVfT6LM9n73tC5W/5UeP2t2daydhvUkVnJ1rQCtUXz9W1Qgp |
| bEZJLT/Rkf/4 |
| -----END TRUST_ANCHOR_UNCONSTRAINED----- |
| |
| 150302120000Z |
| -----BEGIN TIME----- |
| MTUwMzAyMTIwMDAwWg== |
| -----END TIME----- |
| |
| FAIL |
| -----BEGIN VERIFY_RESULT----- |
| RkFJTA== |
| -----END VERIFY_RESULT----- |
| |
| Invalid or unsupported signature algorithm |
| -----BEGIN ERRORS----- |
| SW52YWxpZCBvciB1bnN1cHBvcnRlZCBzaWduYXR1cmUgYWxnb3JpdGht |
| -----END ERRORS----- |
