| [Created by: generate-chains.py] |
| |
| Certificate chain where the root certificate contains a basic constraints |
| extension that indicates it is NOT a CA. |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 6a:33:a7:7b:9f:65:b9:e0:d2:be:48:ba:f7:f8:a0:3f:bd:05:6f:10 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Intermediate |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Target |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:b3:7d:07:29:33:df:ea:eb:78:7f:88:ef:13:78: |
| ff:42:10:a6:ae:9c:8d:9e:c6:48:37:77:a4:2c:27: |
| 81:cd:a9:b2:54:b5:84:cd:0a:a1:90:11:28:1d:85: |
| 0f:9a:88:a4:a1:75:36:42:53:19:71:4d:da:17:02: |
| 9f:80:94:58:55:87:23:47:47:be:8a:64:15:d6:15: |
| 6f:fe:73:a2:e7:e8:5a:01:48:33:ae:21:a1:7c:a3: |
| 3a:58:fc:2c:25:f5:ab:ff:bb:3d:ff:e1:2f:62:d8: |
| 79:ec:e5:d6:b0:33:dc:ce:68:ca:f5:96:b7:0e:5f: |
| 22:80:09:e8:ca:6c:14:64:84:97:a9:c0:bf:57:e4: |
| ad:42:46:c6:58:07:2d:12:18:a2:d1:1f:5d:40:0e: |
| 93:19:eb:a0:4b:49:f5:1e:f6:8b:f9:6f:37:96:e4: |
| 07:04:71:bc:da:d4:e0:3f:3d:4e:3e:71:40:e8:39: |
| 27:ab:c8:2d:b4:22:45:51:32:8a:c4:21:10:84:fe: |
| ba:74:3e:72:8e:64:66:24:f6:a2:7a:f9:10:29:9d: |
| 48:59:57:a9:0a:59:b4:00:60:5c:e1:93:4f:53:23: |
| a1:2e:a3:a3:eb:49:2c:8a:d1:2d:ba:bb:57:c3:a4: |
| 5f:78:85:4b:8d:b0:6a:89:f0:cc:ba:be:60:89:a8: |
| 9c:49 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 72:41:94:01:8B:5E:D8:39:1C:E1:A1:6F:76:49:3E:9F:93:09:60:3A |
| X509v3 Authority Key Identifier: |
| keyid:7A:10:56:B4:5F:2F:4E:7E:28:92:1A:46:EE:EB:8F:1E:A0:B6:3B:02 |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Intermediate.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Intermediate.crl |
| |
| X509v3 Key Usage: critical |
| Digital Signature, Key Encipherment |
| X509v3 Extended Key Usage: |
| TLS Web Server Authentication, TLS Web Client Authentication |
| Signature Algorithm: sha256WithRSAEncryption |
| 59:ff:6b:49:b1:9d:6b:7e:65:47:a8:71:d0:ea:d8:cc:a4:10: |
| 03:88:37:b5:b6:2c:2c:0b:ce:2a:00:0b:7a:c4:8c:16:15:89: |
| 2e:e8:f5:f7:57:71:c9:1c:f2:f5:8f:1f:47:b4:f2:e1:c7:c8: |
| 98:22:16:8e:81:77:e7:40:36:59:5a:ce:51:b1:7f:e0:5e:4c: |
| e3:c0:08:16:47:36:a2:4a:bd:58:40:d4:e3:e2:1a:55:c8:aa: |
| d3:8b:a9:7e:50:36:ea:d2:91:b9:3a:44:6d:fd:38:1b:70:fa: |
| b3:fc:a7:7f:ef:e1:74:8e:b5:b9:16:d5:53:45:f3:9f:38:a5: |
| d0:05:01:db:bd:2b:a7:c3:7d:fa:87:88:7f:cf:2c:f2:d3:7f: |
| 52:79:87:50:26:14:cb:85:47:02:7a:b9:71:96:58:31:7c:a7: |
| ab:f9:89:71:b0:5f:56:ab:cd:56:da:b2:4b:8a:ea:2d:31:c4: |
| 1a:63:19:dd:86:e7:e4:be:a9:14:d2:b4:b8:46:9e:66:3c:c7: |
| 16:6e:13:36:da:5a:b5:60:bf:69:c6:f9:2d:59:f2:6e:3e:35: |
| 2c:da:08:92:39:cd:0b:09:1d:fa:3e:56:1d:f0:75:5d:9e:34: |
| 92:c1:6f:36:38:50:93:8b:9c:05:55:47:7d:8e:a6:86:6a:6f: |
| b4:68:72:62 |
| -----BEGIN CERTIFICATE----- |
| MIIDoDCCAoigAwIBAgIUajOne59lueDSvki69/igP70FbxAwDQYJKoZIhvcNAQEL |
| BQAwFzEVMBMGA1UEAwwMSW50ZXJtZWRpYXRlMB4XDTE4MDMxMDEyMDAwMFoXDTIx |
| MDEwMTEyMDAwMFowETEPMA0GA1UEAwwGVGFyZ2V0MIIBIjANBgkqhkiG9w0BAQEF |
| AAOCAQ8AMIIBCgKCAQEAs30HKTPf6ut4f4jvE3j/QhCmrpyNnsZIN3ekLCeBzamy |
| VLWEzQqhkBEoHYUPmoikoXU2QlMZcU3aFwKfgJRYVYcjR0e+imQV1hVv/nOi5+ha |
| AUgzriGhfKM6WPwsJfWr/7s9/+EvYth57OXWsDPczmjK9Za3Dl8igAnoymwUZISX |
| qcC/V+StQkbGWActEhii0R9dQA6TGeugS0n1HvaL+W83luQHBHG82tTgPz1OPnFA |
| 6Dknq8gttCJFUTKKxCEQhP66dD5yjmRmJPaievkQKZ1IWVepClm0AGBc4ZNPUyOh |
| LqOj60ksitEturtXw6RfeIVLjbBqifDMur5giaicSQIDAQABo4HpMIHmMB0GA1Ud |
| DgQWBBRyQZQBi17YORzhoW92ST6fkwlgOjAfBgNVHSMEGDAWgBR6EFa0Xy9OfiiS |
| Gkbu648eoLY7AjA/BggrBgEFBQcBAQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91 |
| cmwtZm9yLWFpYS9JbnRlcm1lZGlhdGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0 |
| dHA6Ly91cmwtZm9yLWNybC9JbnRlcm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIF |
| oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD |
| ggEBAFn/a0mxnWt+ZUeocdDq2MykEAOIN7W2LCwLzioAC3rEjBYViS7o9fdXcckc |
| 8vWPH0e08uHHyJgiFo6Bd+dANllazlGxf+BeTOPACBZHNqJKvVhA1OPiGlXIqtOL |
| qX5QNurSkbk6RG39OBtw+rP8p3/v4XSOtbkW1VNF8584pdAFAdu9K6fDffqHiH/P |
| LPLTf1J5h1AmFMuFRwJ6uXGWWDF8p6v5iXGwX1arzVbaskuK6i0xxBpjGd2G5+S+ |
| qRTStLhGnmY8xxZuEzbaWrVgv2nG+S1Z8m4+NSzaCJI5zQsJHfo+Vh3wdV2eNJLB |
| bzY4UJOLnAVVR32OpoZqb7RocmI= |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 17:c3:5e:ff:9e:fa:1b:f7:ec:b7:42:5e:7c:00:3a:7e:d7:5e:08:56 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Intermediate |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:bb:be:bc:29:e3:c0:a2:2b:12:a7:b2:77:ff:30: |
| a1:03:d7:b9:aa:0b:7d:b4:2a:4b:e4:cb:72:cb:5e: |
| ff:34:16:06:51:e2:e5:bf:a0:ae:0b:19:34:c3:45: |
| b1:2b:df:94:3c:9c:00:1c:bf:1f:69:a5:a6:08:04: |
| 20:c9:0a:0d:c2:69:0b:a6:63:63:ab:9b:76:5b:d0: |
| 1e:d1:20:32:02:bc:4d:4b:02:7e:8a:6c:90:34:b1: |
| 2b:ae:88:da:99:fd:e0:77:f6:97:54:dc:f5:53:64: |
| 83:87:70:f9:03:c4:aa:45:2c:78:bc:b0:9b:fa:11: |
| eb:a0:8c:a4:62:12:c2:82:ee:70:83:a8:8f:19:26: |
| 1c:f0:60:e4:17:20:bf:4c:d8:76:90:42:0d:cd:82: |
| fe:e9:38:39:ca:d8:72:c0:8f:cf:98:4d:af:47:82: |
| 77:63:a7:6e:c0:e8:ac:f8:4c:a8:b1:b0:20:09:03: |
| 74:67:cc:24:5f:91:24:4a:38:05:ca:64:3e:b7:e0: |
| 03:a5:79:44:71:32:19:31:cb:0a:02:84:39:8a:a7: |
| 10:c7:6b:60:72:81:16:3f:9c:ac:f8:af:46:c4:21: |
| f4:88:30:a8:8d:62:82:1c:36:8d:b0:d9:00:bb:b5: |
| 8c:e5:7a:89:de:6c:fd:3f:f0:e1:12:50:8c:1c:02: |
| 1f:e9 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 7A:10:56:B4:5F:2F:4E:7E:28:92:1A:46:EE:EB:8F:1E:A0:B6:3B:02 |
| X509v3 Authority Key Identifier: |
| keyid:9E:16:CB:63:0C:02:2E:E7:DC:BA:AA:D5:D2:10:B0:E0:F7:2D:14:6D |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:TRUE |
| Signature Algorithm: sha256WithRSAEncryption |
| 99:3d:b2:d7:a3:0c:09:09:62:3f:8f:7e:6c:f1:ae:fa:ba:4b: |
| 55:ad:0c:47:c8:bc:b7:fa:ef:29:6f:55:6c:f2:a1:e7:ce:2b: |
| d5:6b:59:b6:49:b4:94:a8:4e:b4:39:a0:3d:3e:47:0e:ae:61: |
| f2:65:8c:ae:a0:2c:ab:41:6f:73:09:95:26:54:e2:73:0d:15: |
| 78:52:ec:64:71:9f:4f:d5:5e:3c:ed:a1:f9:aa:09:ea:b5:b5: |
| fd:da:f6:07:17:3d:cd:5d:7c:a7:f9:42:ae:19:48:b5:d9:eb: |
| b1:e5:09:64:76:82:39:de:e8:01:e9:95:33:15:ae:41:99:b9: |
| a9:b5:17:e4:c3:bc:14:22:d0:19:d0:11:af:da:9e:fa:28:41: |
| 93:22:a6:6b:67:a6:18:68:75:d6:ba:6b:25:81:23:35:fc:c4: |
| 2e:fa:65:ae:1e:12:37:d7:35:b1:4d:f6:c3:61:68:91:7c:93: |
| e7:71:8e:a9:9b:f1:da:86:a4:72:d9:af:52:67:81:5b:8a:cc: |
| 22:65:8a:40:80:74:2e:69:c7:d2:44:32:63:5b:b5:54:d8:11: |
| 53:c8:a3:fb:fa:3b:78:ab:de:a5:c5:53:ad:76:43:83:1a:cd: |
| ad:10:8c:09:af:dd:1b:5b:8c:e9:a2:d5:d3:22:d4:1e:3e:bd: |
| d2:fc:32:9c |
| -----BEGIN CERTIFICATE----- |
| MIIDgDCCAmigAwIBAgIUF8Ne/576G/fst0JefAA6ftdeCFYwDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw |
| MDBaMBcxFTATBgNVBAMMDEludGVybWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQAD |
| ggEPADCCAQoCggEBALu+vCnjwKIrEqeyd/8woQPXuaoLfbQqS+TLcste/zQWBlHi |
| 5b+grgsZNMNFsSvflDycABy/H2mlpggEIMkKDcJpC6ZjY6ubdlvQHtEgMgK8TUsC |
| fopskDSxK66I2pn94Hf2l1Tc9VNkg4dw+QPEqkUseLywm/oR66CMpGISwoLucIOo |
| jxkmHPBg5Bcgv0zYdpBCDc2C/uk4OcrYcsCPz5hNr0eCd2OnbsDorPhMqLGwIAkD |
| dGfMJF+RJEo4BcpkPrfgA6V5RHEyGTHLCgKEOYqnEMdrYHKBFj+crPivRsQh9Igw |
| qI1ighw2jbDZALu1jOV6id5s/T/w4RJQjBwCH+kCAwEAAaOByzCByDAdBgNVHQ4E |
| FgQUehBWtF8vTn4okhpG7uuPHqC2OwIwHwYDVR0jBBgwFoAUnhbLYwwCLufcuqrV |
| 0hCw4PctFG0wNwYIKwYBBQUHAQEEKzApMCcGCCsGAQUFBzAChhtodHRwOi8vdXJs |
| LWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUwIzAhoB+gHYYbaHR0cDovL3VybC1m |
| b3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/ |
| MA0GCSqGSIb3DQEBCwUAA4IBAQCZPbLXowwJCWI/j35s8a76uktVrQxHyLy3+u8p |
| b1Vs8qHnzivVa1m2SbSUqE60OaA9PkcOrmHyZYyuoCyrQW9zCZUmVOJzDRV4Uuxk |
| cZ9P1V487aH5qgnqtbX92vYHFz3NXXyn+UKuGUi12eux5QlkdoI53ugB6ZUzFa5B |
| mbmptRfkw7wUItAZ0BGv2p76KEGTIqZrZ6YYaHXWumslgSM1/MQu+mWuHhI31zWx |
| TfbDYWiRfJPncY6pm/HahqRy2a9SZ4FbiswiZYpAgHQuacfSRDJjW7VU2BFTyKP7 |
| +jt4q96lxVOtdkODGs2tEIwJr90bW4zpotXTItQePr3S/DKc |
| -----END CERTIFICATE----- |
| |
| Certificate: |
| Data: |
| Version: 3 (0x2) |
| Serial Number: |
| 17:c3:5e:ff:9e:fa:1b:f7:ec:b7:42:5e:7c:00:3a:7e:d7:5e:08:55 |
| Signature Algorithm: sha256WithRSAEncryption |
| Issuer: CN=Root |
| Validity |
| Not Before: Mar 10 12:00:00 2018 GMT |
| Not After : Jan 1 12:00:00 2021 GMT |
| Subject: CN=Root |
| Subject Public Key Info: |
| Public Key Algorithm: rsaEncryption |
| Public-Key: (2048 bit) |
| Modulus: |
| 00:a8:a5:0e:06:b7:99:51:ad:fd:57:50:ba:00:3c: |
| ce:4b:a5:f8:a1:6d:00:ae:32:93:30:ec:a3:1b:58: |
| e3:09:5e:4e:61:fa:7f:f1:21:1a:a6:8d:bd:72:21: |
| e6:6d:82:33:7e:20:be:66:54:a6:42:92:18:db:43: |
| ef:09:93:d8:b4:6e:64:78:ce:b4:3b:9f:44:62:9f: |
| 73:dd:e9:0f:11:ce:9a:a1:82:dd:32:04:71:f2:46: |
| 03:e2:a1:7c:36:2f:78:de:97:b8:7b:da:3a:6a:b8: |
| 81:7c:d1:76:17:72:3c:a6:ba:74:4b:38:db:6b:47: |
| d3:52:f1:e0:ad:17:4f:48:fe:2b:7a:a5:28:aa:52: |
| 12:4c:f6:c2:4e:23:b5:b2:eb:9c:e1:6b:91:05:b0: |
| a7:3f:64:6f:bc:08:96:78:de:9f:ed:27:5b:d8:33: |
| b6:80:aa:80:40:a7:a3:c4:96:37:71:9a:ef:a6:2b: |
| 5d:07:e9:8d:e5:9b:84:4a:ac:db:52:68:b9:80:74: |
| be:ce:a7:c2:fe:b7:45:37:b2:c2:e9:0f:f9:54:15: |
| ab:7e:e9:c6:86:05:4a:26:f8:b6:3f:ec:a7:0a:4e: |
| 00:a1:73:3e:f3:db:77:38:0f:bc:37:9b:7c:cb:4d: |
| fc:ab:4b:d1:a2:ff:7d:1d:b1:d2:14:0d:74:bc:a4: |
| 8d:11 |
| Exponent: 65537 (0x10001) |
| X509v3 extensions: |
| X509v3 Subject Key Identifier: |
| 9E:16:CB:63:0C:02:2E:E7:DC:BA:AA:D5:D2:10:B0:E0:F7:2D:14:6D |
| X509v3 Authority Key Identifier: |
| keyid:9E:16:CB:63:0C:02:2E:E7:DC:BA:AA:D5:D2:10:B0:E0:F7:2D:14:6D |
| |
| Authority Information Access: |
| CA Issuers - URI:http://url-for-aia/Root.cer |
| |
| X509v3 CRL Distribution Points: |
| |
| Full Name: |
| URI:http://url-for-crl/Root.crl |
| |
| X509v3 Key Usage: critical |
| Certificate Sign, CRL Sign |
| X509v3 Basic Constraints: critical |
| CA:FALSE |
| Signature Algorithm: sha256WithRSAEncryption |
| 52:31:34:45:43:eb:b0:b8:16:9a:93:b2:ec:b8:7b:75:13:95: |
| f4:0a:7e:ba:4d:aa:24:b2:3c:a2:3e:18:4c:89:87:b3:01:dc: |
| ad:d0:c7:8e:b5:72:fd:fb:0b:2b:d1:65:f3:aa:f5:af:cf:25: |
| 44:21:94:bb:52:ea:e0:71:cd:b7:53:0b:8b:58:af:a7:cd:1d: |
| e1:6f:9a:64:cd:92:b7:0e:5e:37:71:2f:1d:60:2b:93:80:15: |
| ee:77:33:af:89:df:88:99:9b:ca:6a:46:0d:b8:77:d5:12:d1: |
| 99:5b:ef:4b:0a:ac:ae:81:eb:2f:b3:0c:2f:5b:3a:cc:1b:10: |
| 00:73:aa:ba:73:f7:86:8f:e2:84:6d:e5:21:f0:9b:5f:fd:4c: |
| ea:32:aa:e5:b8:fc:a7:6c:a6:89:43:05:1d:8f:33:bf:0c:31: |
| e6:c9:ef:be:81:8e:0a:c0:8c:d1:94:42:f1:03:2d:42:34:b9: |
| df:cd:13:e9:9e:da:b1:9b:9b:b6:82:5b:d6:f4:2f:c6:6a:58: |
| 65:36:6b:85:64:f1:ac:cd:ed:c3:37:66:aa:36:fa:ea:3f:b3: |
| 5e:bd:2e:0d:7a:e7:35:73:78:95:8a:9f:3f:55:2d:84:a1:54: |
| 30:1b:c0:d3:2f:83:3a:e2:ce:97:9c:ac:20:67:65:26:7f:61: |
| 9e:e8:95:d2 |
| -----BEGIN CERTIFICATE----- |
| MIIDdTCCAl2gAwIBAgIUF8Ne/576G/fst0JefAA6ftdeCFUwDQYJKoZIhvcNAQEL |
| BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw |
| MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK |
| AoIBAQCopQ4Gt5lRrf1XULoAPM5LpfihbQCuMpMw7KMbWOMJXk5h+n/xIRqmjb1y |
| IeZtgjN+IL5mVKZCkhjbQ+8Jk9i0bmR4zrQ7n0Rin3Pd6Q8Rzpqhgt0yBHHyRgPi |
| oXw2L3jel7h72jpquIF80XYXcjymunRLONtrR9NS8eCtF09I/it6pSiqUhJM9sJO |
| I7Wy65zha5EFsKc/ZG+8CJZ43p/tJ1vYM7aAqoBAp6PEljdxmu+mK10H6Y3lm4RK |
| rNtSaLmAdL7Op8L+t0U3ssLpD/lUFat+6caGBUom+LY/7KcKTgChcz7z23c4D7w3 |
| m3zLTfyrS9Gi/30dsdIUDXS8pI0RAgMBAAGjgcgwgcUwHQYDVR0OBBYEFJ4Wy2MM |
| Ai7n3Lqq1dIQsOD3LRRtMB8GA1UdIwQYMBaAFJ4Wy2MMAi7n3Lqq1dIQsOD3LRRt |
| MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh |
| L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S |
| b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0B |
| AQsFAAOCAQEAUjE0RUPrsLgWmpOy7Lh7dROV9Ap+uk2qJLI8oj4YTImHswHcrdDH |
| jrVy/fsLK9Fl86r1r88lRCGUu1Lq4HHNt1MLi1ivp80d4W+aZM2Stw5eN3EvHWAr |
| k4AV7nczr4nfiJmbympGDbh31RLRmVvvSwqsroHrL7MML1s6zBsQAHOqunP3ho/i |
| hG3lIfCbX/1M6jKq5bj8p2ymiUMFHY8zvwwx5snvvoGOCsCM0ZRC8QMtQjS5380T |
| 6Z7asZubtoJb1vQvxmpYZTZrhWTxrM3twzdmqjb66j+zXr0uDXrnNXN4lYqfP1Ut |
| hKFUMBvA0y+DOuLOl5ysIGdlJn9hnuiV0g== |
| -----END CERTIFICATE----- |
